subinacl /noverbose /printer PrinterName /deny=Domain\User=P - PrinterName is the windows printer name, if multiword, enclose within quotes - Domain\User is the domain and username of the user to be denied