ACS - managing printer output preferences filter

I've completed my ACS configuration.
3 central deployments utilizing UNC file share to a central config server.
Will cover 99.9% of all users.

Base
Trnf
Full

I also utilized the autoimport feature.

com.ibm.iaccess.autoimport=\\vmxxxx01.yyy.com\ibm_acs_base$\Current\acs_bak.zip
com.ibm.iaccess.autoimport.version=1

All HOD sessions will also be deployed from the same central location.
All HOD sessions are auto generated, auto created.
Workstation id = &COMPN*=
Use Computer name
Avoid Duplicates

Session name matches PC name.
Both SSL and Kerberos enabled.

So far, all is good.

There is no easy way to control printer output config.
The default for printer output preferences filter is:

User
Current user(*Current)
Output Queue
All output queues (*All)
User Specified Data
All entries(*All)
Date and times
All dates and times

One problem is that Printer output includes all their joblogs, not desired.
Another issue I see ahead is a user will not be able to access a spoolfile not created by them.

How are others in the group managing/handling the ACS printer output preferences filter?

Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx
http://www.pencor.com/