I hate the necessary evil that is inherent in the need for printers in our lives.

For purposes of L2, is the answer for them that they should be on their own VLAN with only the print server accessible to them and everyone must print through the print server? I figured this is the option that is required considering the insecurity of port 9100 etc. no?