Advanced Groups

Last Updated: July 02, 2026

Advanced Groups allow you to combine two or more deployment criteria to control which printers are installed for end users. Rather than deploying printers based on a single condition, Advanced Groups let you build rules that use multiple object types together, so installations happen only when users meet all the defined conditions.

Each criterion in an Advanced Group is called a rule. Rules use either a Contained In or Excluding operation to define whether an object qualifies or disqualifies a user for a printer deployment.

Key Points

Review the following key points:

• Rule Operations: The operation determines whether the value is included or excluded from the printer deployment.
• Terminal Service Session: This option identifies end users who are working on virtual desktops. If a rule contains the Terminal Service Session option, it only applies to end users working on virtual desktops.

Supported Rule Types

An active LDAP connection is only necessary if you want to have specific users or groups as part of the rule. Without the connection, the Agent is limited and can only find the user and group information that the operating system (OS) provides. For more details refer to LDAP Domain.

How It Works

Advanced Groups evaluate all rules in a group when determining whether to install a printer for a user. A user must satisfy every Contained In rule and must not match any Excluding rule for the printer to be installed.

The following use cases illustrate common ways to use Advanced Groups.

Deploy printers by network location. Create a rule with the Contained In operation and the IP Address range value type. When users connect to a network within that IP range, the printer deployments for that location install automatically on their devices. This is useful for office floors, branch locations, or any network segment where a specific set of printers should be available.

Refine deployments with group membership. Add groups as additional Contained In rules to narrow a deployment to a specific subset of users within a location. For example, you can deploy a printer to users in the 192.168.3.0–192.168.3.100 range who are also in the Accounting group.

Exclude groups from a deployment. Use the Excluding operation to prevent a printer from being installed for specific users, even if they are in the IP address range. For example, you can include the 192.168.3.0–192.168.3.100 range but exclude the Sales group so that printer does not install on Sales team devices.

Requirements

• No additional licensing requirements exist for Advanced Groups.
• An active LDAP connection is only necessary if you want to have specific users or groups as part of the rule.
  • Without the connection, the Agent is limited and can only find the user and group information that the operating system (OS) provides. For more details refer to LDAP Domain.

Next Steps

After you understand how Advanced Groups work, create one and apply it to a printer deployment:

• Configure Advanced Groups.