Advanced Groups

Last Updated: April 07, 2026

You use Advanced Groups to combine two or more objects. For example, if you are deploying a printer to users in a group, but only to members in a specific IP address range, end users who meet the requirements of both deployments automatically have the printer installed on their devices.

An Advanced Group entity is called a rule because it combines two or more deployment types, and the end user must meet the requirements of the rule for installation to occur. Use Advanced Groups to add or exclude. For example, you can add the IP address range 192.168.3.0-192.168.3.100 but exclude the Sales group. The Advanced Group deployment installs a printer on any device in the IP address range unless the end user is part of the Sales team.

Key Points

Review the following key points:

  • Rule Operations: The operation determines whether the value is included or excluded from the printer deployment.
  • Terminal Service Session: This option identifies end users who are working on virtual desktops. If a rule contains the Terminal Service Session option, it only applies to end users working on virtual desktops.

Supported Rule Types

  • Active Directory User, Computer, or Group.
  • Active Directory Container, or OU.
  • Terminal Service Session.
  • IP Address Range.
  • Hostname.
  • MAC Address.

An active LDAP connection is only necessary if you want to have specific users or groups as part of the rule. Without the connection, the Client is limited and can only find the user and group information that the operating system (OS) provides. Refer to LDAP Domain for configuration steps.

Create Advanced Groups

  1. In the Admin Console, navigate to Tools then Advanced Groups.
  2. Select Add in the upper-right corner.
  3. Enter a name and a description (optional).
  4. Select Save.
  5. Use the Operation dropdown menu to select one of the following:
    • Contained In: An object (user, group, IP address range, etc.) that determines where the printer is deployed.
    • Excluding: An object that is excluded from a printer deployment.
  6. Use the Value dropdown menu to select one of the following:
    • Active Directory User, Computer, or Group.
    • Active Directory Container, or OU.
    • IP Address Range.
    • Hostname.
    • MAC Address.
    • Terminal Service Session.
  7. Follow the steps to find your object, and select Add.
  8. After you add all the rule types, select Save in the upper-right corner.

Admin Console showing Advanced Groups section.

Now that you added the Advanced Group, it is available to use in printer deployments. Refer to Printer Deployment for steps to apply Advanced Groups.