[Samba] Restricting printer views

[ryan.suarez at sheridanc.on.ca]

Greetings Admins,

We have a samba3.0.2a + cups 1.1.20 print server to serve printing for
our Windows XP clients.  Samba is configured with security = ADS.

So when a client maps the print server (ie: \\printserver) then all the
printers are displayed, available for point & print.

How do you hide printers from specific users?

We have academic printers and administrative printers.  Academic users
should not be able to see administrative printers and vice versa.

much appreciated,
Ryan

Here is my smb.conf:

[global]
        workgroup = SOMEWORKGROUP
        netbios name = somename
        log file = /usr/local/samba/logs/%m.log
        max log size = 50000
        debug level = 5
        name resolve order = wins bcast

        wins server = some.host.domain
        wins proxy = no
        wins support = no
        dns proxy = yes
        local master = no
        preferred master = no
        domain master = no
        os level = 0

        security = ADS
        encrypt passwords = yes
        password server = *
        realm = some.host.domain

        interfaces = 123.45.67.8/24
        allow hosts = 123.45. localhost

        printing = cups
        printcap name = cups
        load printers = yes

        socket options = TCP_NODELAY

[printers]
        comment = All Printers
        path = /var/spool/samba
        browseable = no
        guest ok = yes
        public = yes
        writeable = no
        printable = yes
        printer admin = root
        create mode = 0700

[print$]
        comment = Printer Drivers
        path = /usr/local/samba/drivers
        browseable = yes
        guest ok = no
        read only = yes
        write list = root