Connecting computer with no internet connection to network printer

Page 1 of 2 12 LastLast

  1. Posts : 3
    10
       #1

    Connecting computer with no internet connection to network printer


    I have 3 computers that are connected to internet and are also connected to network printer. I have another computer that has financial data. In order to prevent any copying, I want to turnoff internet and block all USB ports on this 4th computer but still want to allow user to print on the network printer.
    Printer has only one port for installing Ethernet connection and I do not require wireless printing for any of my computer.

    Thanks in advance for your help
      My Computer


  2. Posts : 265
    Windows 10 Enterprise
       #2

    Options: Move the financial computer closer to the printer and connect the printer manually through a USB port / disconnect this computer from the network by removing the Ethernet cable and disable any wireless adapters.

    Option: By a separate stand alone printer for the financial computer.

    Option: Block all internet connectivity using the Windows firewall, but allow printing to the network printer.

    Things to consider...hope it helps.
      My Computer


  3. Posts : 3
    10
    Thread Starter
       #3

    Thanks, there is no USB port on the printer. Can I connect all computers by network cable and printer to a network switch, that is not connected to internet
      My Computer


  4. Posts : 265
    Windows 10 Enterprise
       #4

    dk1971 said:
    Thanks, there is no USB port on the printer. Can I connect all computers by network cable and printer to a network switch, that is not connected to internet
    Yes you can. BUT, if any of these computers are connected to the internet at the same time, then there is always the possibility that someone could connect to your financial computer through the network.

    Truly the only safe way to prevent accidental access is to make it a stand alone computer with its on printer. Printers are cheap these days...just saying. Anyway, let us know what you decide to do.
      My Computer


  5. Posts : 2,324
    Win10
       #5

    dk1971 said:
    Thanks, there is no USB port on the printer. Can I connect all computers by network cable and printer to a network switch, that is not connected to internet
    I would think if the 3 computers are assigned a different workgroup name and Subnet number than the Financial Data Computer, that it is unlikely it can be accessed via one of the other computers from the Internet but buying another printer and using USB and having no Ethernet connection to the outside world ( also known as an AirGap ) is the safest way to go especially if you are not a Network Expert, and you have highly valuable Data to protect.
      My Computers


  6. Posts : 9,765
    Mac OS Catalina
       #6

    dk1971 said:
    I have 3 computers that are connected to internet and are also connected to network printer. I have another computer that has financial data. In order to prevent any copying, I want to turnoff internet and block all USB ports on this 4th computer but still want to allow user to print on the network printer.
    Printer has only one port for installing Ethernet connection and I do not require wireless printing for any of my computer.

    Thanks in advance for your help
    If you plan on blocking all access to one computer, it would be easier to just not hook up the Ethernet cable to it. If there is no access to that workstation, there is no way that it will be able to print to a network printer.

    Also if the USB slots and case are accesiable, information can still be retrieved from the drive.
      My Computer


  7. Posts : 9,765
    Mac OS Catalina
       #7

    Kbird said:
    I would think if the 3 computers are assigned a different workgroup name and Subnet number than the Financial Data Computer, that it is unlikely it can be accessed via one of the other computers from the Internet but buying another printer and using USB and having no Ethernet connection to the outside world ( also known as an AirGap ) is the safest way to go especially if you are not a Network Expert, and you have highly valuable Data to protect.
    any computer can still be accessed with portable tools or even using the proper commands. There is nothing safe if you are using a home network that is not a managed system using VLAN's.
      My Computer


  8. Posts : 2,324
    Win10
       #8

    bro67 said:
    any computer can still be accessed with portable tools or even using the proper commands. There is nothing safe if you are using a home network that is not a managed system using VLAN's.
    Nothing is 100% safe , given time and expertise, someone could do it, which is why I suggested if the OP isn't an expert to go with a USB connected printer and no Ethernet if the Information is highly valuable. Physically restricting access is alot harder of course , though newer MB's allow for turning off of USB ports now.
      My Computers


  9. Posts : 9,765
    Mac OS Catalina
       #9

    Kbird said:
    Nothing is 100% safe , given time and expertise, someone could do it, which is why I suggested if the OP isn't an expert to go with a USB connected printer and no Ethernet if the Information is highly valuable. Physically restricting access is alot harder of course , though newer MB's allow for turning off of USB ports now.
    Exactly. That is why in some types of setups, you have to go through a locked door, a smart key or RFID to log into the workstation, then another login id to get into the data that you need to look at, then print to a printer attached to the computer.

    The biggest issue that you run into on these kind of setups is that there are no regular backups of the data and the OS is not regularly updated.

    If it is in a home setting, it is just easier to keep the data on a pocket drive and lock it up into a fire safe, than going through all of this hassle.

    If I really have data that I want no one to get to, there is always double encryption if I really got a bur. The disable of the USB ports has been around since the Intel Core 2 Duo boards came around.
      My Computer


  10. Posts : 132
    windows 10
       #10

    There are many, many ways of doing this.

    One way is using the pc's firewall. Go in to the firewall, advanced settings, in both inbound and outbound rules look for the software you want to block - for example Microsoft Edge. Select properties and change to "block the connection". If there aren't any rules for the application you want to block then create one in both incoming and outgoing using the New Rule selection. In this way you can disable access for Browsers, but leave Update and so on running. There really aren't that many things you need to block.

    You could also use a toggle application to switch the internet off ( try Internet Off ) then you can readily switch it back on when you want to allow update. Just place the toggle app in a folder only you know about or can access.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 16:36.
Find Us




Windows 10 Forums