Skip to content

Install as Network Printer

Jump to bottom
clawsoftware edited this page Apr 18, 2023 · 13 revisions

Intro

Since version 0.9.0, clawPDF has added support for printing over the network. Multiple printers with different profiles can be set up. To activate the network printing feature, please refer to the instructions in install. If you face any issues, feel free to post your questions in the discussions section.

Install

  1. Install clawPDF on a print server
  2. Create a local account on the print server or a domain account that will act as a service account for clawPDF.

ℹ️ The user does NOT have to be an administrator.
⚠️ For security reasons, you should always create an account with as few rights as possible.
⚠️ Don't use a domain administrator account!

  1. Log in to the print server with the created account.
  2. Open a Elevated Command Prompt (Run as Administrator) and execute this command to save the service account user:
"C:\Program Files (x86)\clawpdf\clawPDF.Bridge.exe" /networkprinter=enable /username=svc_clawpdf [/domain=clawpdf]

⚠️ For technical reasons, the authentication of the service account is encrypted and stored in the
⚠️ file C:\Program Files (x86)\clawpdf\NetworkPrinter.bin. An attacker can decrypt the file if they have local access.
⚠️ Therefore, the network printer functionality should not be operated on a shared user system.
⚠️ As a hardening measure, remove the group Users from the file. Since version 0.9.1 all user group permissions except administrators are removed from NetworkPrinter.bin.

  1. Open clawPDF, go to Profile Settings, and create a profile for the network printer.
  2. Make sure to disable the Open with standard viewer after conversion option under Save.
  3. Also, specify a fixed location under Auto-Save, such as a shared folder.
  4. You can use tokens like <PrintJobAuthor> to create a folder with the username and save the print job there. If you want to restrict folder permissions, make sure the service account has the appropriate rights.
  5. Open clawPDF, go to Application Settings, then Printers, and create a new printer.
  6. Assign the profile created earlier to the newly created printer.
  7. Share the printer and distribute it using GPO.

Uninstall

"C:\Program Files (x86)\clawpdf\clawPDF.Bridge.exe" /networkprinter=disable
Clone this wiki locally