Announcement

Collapse
No announcement yet.

Deploying Printers with GPO not working

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Deploying Printers with GPO not working

    I've got a test setup in vmWare Server of a simple 2003 R2 domain: one Server and one XP Pro Machine. Both virtual machines have been completely updated via "Windows Update". Nothing special has been done to either virtual machine with the exception of the server - I made it a Domain Controller (with DNS, DHCP), I added the Print Server Role and a dummy HP 2500C printer that I shared.

    My goal for this setup is to make printer deployment through GPOs work.

    What I have done thus far is create one "normal" user, an OU for printer deployment, a group for printer deployment inside the OU. I made the "normal" user a member of the printer deployment group. I created a GPO for this OU which does basically one thing - in "User Configuration/Windows Settings/Scripts", I've created a logon script that runs "pushprinterconnection.exe -log".

    I then went into "Printer Management" and deployed the test printer via the printer deployment GPO as a "Per User Connection".

    Only one thing appeard strange to this point: When ever I'm editing the GPO - for any reason - I get this message:

    MMC has detected an error in a snap-in. It is recommended that you shut down and restart MMC.
    • Report this error to Microsoft, and then shut down MMC.
    • Continue running and ignore with this snap-in for the rest of the session.
    • Continur running and always ignore with this snap-in, regardless of user or session.


    I chose the default "Continue and ignore for this session". The GPO looks fine afterwards, so I'm assuming everything is OK.

    So now I turn to the workstation. I log on as the "normal user" and the only GPO that gets applied is the "Default Domain Policy" (according to gpresult).

    Thinking that it's a permission issue, I make the "normal user" a member of the local "Power Users" group and try to log on again. Same result.

    Here is the output of "gpresult":

    Code:
    H:\>gpresult
    
    Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
    Copyright (C) Microsoft Corp. 1981-2001
    
    Created On 11/17/2006 at 8:28:09 AM
    
    
    RSOP results for NEI\kcollins on TESTBEDXP : Logging Mode
    ----------------------------------------------------------
    
    OS Type:                     Microsoft Windows XP Professional
    OS Configuration:            Member Workstation
    OS Version:                  5.1.2600
    Domain Name:                 NEI
    Domain Type:                 Windows 2000
    Site Name:                   Default-First-Site
    Roaming Profile:
    Local Profile:               C:\Documents and Settings\kcollins
    Connected over a slow link?: No
    
    
    COMPUTER SETTINGS
    ------------------
        CN=TESTBEDXP,CN=Computers,DC=nei,DC=local
        Last time Group Policy was applied: 11/17/2006 at 8:27:44 AM
        Group Policy was applied from:      lexfile01.nei.local
        Group Policy slow link threshold:   500 kbps
    
        Applied Group Policy Objects
        -----------------------------
            Default Domain Policy
    
        The following GPOs were not applied because they were filtered out
        -------------------------------------------------------------------
            Local Group Policy
                Filtering:  Not Applied (Empty)
    
        The computer is a part of the following security groups:
        --------------------------------------------------------
            BUILTIN\Administrators
            Everyone
            BUILTIN\Users
            NT AUTHORITY\NETWORK
            NT AUTHORITY\Authenticated Users
            TESTBEDXP$
            Domain Computers
    
    
    
    USER SETTINGS
    --------------
        CN=Kevin L. Collins,CN=Users,DC=nei,DC=local
        Last time Group Policy was applied: 11/17/2006 at 8:27:44 AM
        Group Policy was applied from:      lexfile01.nei.local
        Group Policy slow link threshold:   500 kbps
    
        Applied Group Policy Objects
        -----------------------------
            Default Domain Policy
    
        The following GPOs were not applied because they were filtered out
        -------------------------------------------------------------------
            Local Group Policy
                Filtering:  Not Applied (Empty)
    
        The user is a part of the following security groups:
        ----------------------------------------------------
            Domain Users
            Everyone
            BUILTIN\Power Users
            BUILTIN\Users
            NT AUTHORITY\INTERACTIVE
            NT AUTHORITY\Authenticated Users
            LOCAL
            Lexington Upstairs Printer Users
    At this point, I'm pretty much at a loss. I've tried "gpupdate /force" to make certian the policy had been distributed. I've tried restarting the XP virtual machine. I've done everything I can think of to apply this GPO and I can't make it work.

    Can someone give me a hand?
    --

    ScatterBrain

    "I reject your reality and substitute my own!"
    -- The Mythbusters

  • #2
    Re: Deploying Printers with GPO not working

    More Info:

    If I remove the printer deployment group from printer deployment OU and simply place a user account in the OU, then the GPO works.

    First off: Why?

    Second: Is there a way that I can control this better so that I keep all of my users in one OU (The default "users" OU) and then manage their placement with Groups and OUs?
    --

    ScatterBrain

    "I reject your reality and substitute my own!"
    -- The Mythbusters

    Comment


    • #3
      Re: Deploying Printers with GPO not working

      Originally posted by ScatterBrain View Post
      More Info:

      If I remove the printer deployment group from printer deployment OU and simply place a user account in the OU, then the GPO works.

      First off: Why?

      Second: Is there a way that I can control this better so that I keep all of my users in one OU (The default "users" OU) and then manage their placement with Groups and OUs?
      I just saw this post and I didn't read the whole thread (I'll do it later) but I see that you're trying to apply a GPO to a group. This is not possible. GPOs can only be applied to users and computers. The confusion might come from the fact that GPOs can be filtered based on group membership.
      HTH
      Gotta go.
      Regards,
      Jeremy

      Network Consultant/Engineer
      Baltimore - Washington area and beyond
      www.gma-cpa.com

      Comment


      • #4
        Re: Deploying Printers with GPO not working

        Originally posted by JeremyW View Post
        I just saw this post and I didn't read the whole thread (I'll do it later) but I see that you're trying to apply a GPO to a group. This is not possible. GPOs can only be applied to users and computers. The confusion might come from the fact that GPOs can be filtered based on group membership.
        HTH
        Gotta go.
        You're right-on Jeremy. I found on a couple of other sites, here and here, where your explination is confirmed.

        In addition, I created an OU, placed my users directly in that OU, then created a Deployment Group Policy. After that, I altered the security settings of that GPO denying the "Apply Group Policy" access to all by a certian group and walllah...I've got it working now.

        Thanks.
        --

        ScatterBrain

        "I reject your reality and substitute my own!"
        -- The Mythbusters

        Comment


        • #5
          Re: Deploying Printers with GPO not working

          Thanks for posting back. Glad you go it working.
          Regards,
          Jeremy

          Network Consultant/Engineer
          Baltimore - Washington area and beyond
          www.gma-cpa.com

          Comment

          Working...
          X