How do I create a PDF file that will disallow printing without requiring a password to open the PDF file?

To create a PDF file that cannot be printed, you must set up your INI file with the appropriate encryption information.

Use the PDFKEY utility to generate the encrypted passwords used in the security control group. This control group specifies where permissions, passwords, and encryption strength are set. For more infomration on this utility, see the Utilities Reference.

Note   Permissions not explicitly denied are allowed.

For example, if you run the PDFKEY utility as shown here:

pdfkw32 /P=N

The utility will generate a PDF_Encryption control group that contains encryption information which prevents printing. Here is the output from the PDFKEY utility:

C:\> pdfkw32 /P=N
 
<PDF_Encryption>
KeyLength = 128
OwnerKey = 36451bd39d753b7c1d10922c28e6665aa4f3353fb0348b536893e3b1db5c579b
UserKey = 1d5993d363f2c3b3815f48417c5a0bb600000000000000000000000000000000
AllowPrinting = FALSE
 
C:\>

This control group and options will generate the encryption keys needed to produce a PDF file that cannot be printed and does not require a password to open the PDF file. You must copy the PDF_Encryption control group and options into your INI file.

Note   Because there were no password parameters specified (/U=user password or /O=owner password), the PDF_Encryption control group does not contain user or owner passwords.

Also, be sure to modify the PDF printer control group (usually PrtType:PDF) to contain the following Encrypt and SecurityGroup options:

< PrtType:PDF >
Encrypt		= Yes
SecurityGroup	= PDF_Encryption
...
Module		= PDFW32
PrintFunc	= PDFPrint

See the Output Management Guide (Previously known as Printers Reference) for more information on adding security settings to PDF files.