Create a Mac Printing Policy

Use the Mac Printing Policy to define network printers and manage printing services on macOS devices (apple style says "Macs") remotely. Configure printer settings, drivers, and access controls from JumpCloud, ensuring a standardized printing environment across your fleet.

Prerequisites:

• Devices must be enrolled in Apple MDM with the following enrollment type:
  • Device-Enrolled Devices - These devices are owned by the corporation, and enrolled by the admin or by the user.
  • Auto-Enrolled Devices - These devices are owned and enrolled by the corporation through Automated Device Enrollment.
    For more information, see MDM Enrollment Method.
• Target devices must be running  macOS 11 or later with JumpCloud Agent installed. For more information on device compatibility, see Agent Compatibility, System Requirements, and Impacts.
• For network printers, devices must have network visibility to the printer's IP address or hostname.

Creating the Policy

To create the policy:

1. Log in to the JumpCloud Admin Portal.

2. Go to Device Management > Policy Management.
3. In the All tab, click (+).
4. On the New Policy panel, select the Mac tab.
5. Search and select Printing from the list, then click configure.
6. (Optional) In the Policy Name field, enter a new name for the policy or keep the default. Policy names must be unique.
7. (Optional) In the Policy Notes field, enter details such as creation date of the policy, and information on testing and deployment of the policy.

Configuring the Policy

Configure the following printer settings:

• Require Admin to Add Printers - Toggle this Off (False) to allow standard users to add their own printers, or On to restrict printer setup to administrators only.
• Allow Local Printers - Enable this to permit users to connect and use printers via USB or local connections.
• Require Admin to Print Locally - Enable this to add a security layer requiring administrator credentials before a user can print to a local (non-network) printer.
• Show Only Managed Printers - Enable this to simplify the user experience by hiding all unmanaged printers, ensuring users only see authorized company printer options.
• Print Footer - Enable this to automatically overlay a tracking footer on every printed page.
• Include MAC Address - Toggle this On to include the device's unique MAC address in the footer for advanced document auditing and security.
• Footer Font Size - Customize the legibility of the footer by selecting the font size (for example, 7).
• Footer Font Name - Customize the legibility of the footer by selecting the font name ( for example, Helvetica).
• Default Printer Device URI -Enter the primary printer's connection path (for example, ipp://printer.example.com/) to set it as the automatic selection for all users.
• Default Printer Display Name - Enter a user-friendly name (for example, Main Office Printer) that will appear as the default choice in the print menu.
• User Printer List 
  • Printer ID - Assign a unique internal name for the printer (for example, office_level_1).
  • Device URI - Provide the exact network path for the printer (for example, ipp://192.168.1.50/).
  • Display Name - Provide the name users will see in their printer list (for example, Marketing Department Color Printer).
  • Location - Add a helpful description of where the printer is physically located (for example, Breakroom - North Wing).
  • Model - Specify the printer model to ensure the correct drivers are utilized (for example, HP LaserJet 500).
  • Printer Locked- Enable this to prevent users from manually changing these specific printer settings on their devices.
  • PPD URL - Enter the file path for the PostScript Printer Description (PPD) to ensure all advanced printing features (like duplex or tray selection) are available.

Assigning and Applying the Policy

To apply and save the policy:

1. (Optional) Select the Device Groups tab. Select one or more device groups where you want to apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.

2. (Optional) Select the Devices tab. Select one or more devices where you want to apply this policy.
3. Click Save. If prompted, click Save again. The policy configuration settings are applied automatically and do not require a system restart.