We just made the "new" printers available in self service but no reason
why you can't push them. I get the second part but leaving SMB as is
with no patch or the settings lower isn't a great option in some
SMB to LPD turned out to be fairly painless, enable the role on the
Windows server and point print mappings to LPD:/ rather than SMB:/ The
more concerning part seems to be that most methods have some kind of
asterisk against them as deprecated or not...
Yeah, SMB looks a goner and either skipping patches or lowering the
security options there aren't going to be good for many. Have seen
similar MS guidance. Could really do with Apple or JAMF owning this and
providing something new but wont hold breat...
SMB to Win Print servers is pretty ruined if you want to apply required
security, LPD / IPP (via ISS) are installable but kind of deprecated,
CUPS is being suggested by vendors (kind of deprecated by Apple but
happy via the open source project it was...