none
Deploy Printers by GPO Computer Preferences

    Question

  • Hi

    I install my printers using computer preferences GPO and this works great. I want to allow specific groups of users to print to these printers. Does anyone know if this is possible? I set permissions on the printer to deny a group of users and this never worked.

    Cheers

    Shane

    Monday, October 05, 2015 1:15 PM

Answers

All replies

  • Hi Shane Walfword,

    Thanks for your post.

    Could you please run gpupdate /force or restart the computer to test?
    Please run a gpresult / rsop report to see what policies are being applied / not applied and any errors.

    Besides, you may follow the article below to manage the related printer permission.

    Assigning printer permissions

    https://technet.microsoft.com/en-us/library/cc773372%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

    Best Regards,

    Mary Dong


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, October 06, 2015 5:23 AM
    Moderator
  • Thanks for the reply

    I have restarted the computer and the printers are applying OK without error. The issue i have is i grant deny to a group of users and they can still print to the printer. So the question i have is, is it possible to grant deny to users if the printers are applied via computer preferences? 

    Thanks

    Shane

    Tuesday, October 06, 2015 8:34 AM
  • I have restarted the computer and the printers are applying OK without error. The issue i have is i grant deny to a group of users and they can still print to the printer. So the question i have is, is it possible to grant deny to users if the printers are applied via computer preferences? 

    Did you configure GPP-Printers - Shared Printer, or, GPP-Printers - TCP/IP Printer ?

    https://technet.microsoft.com/en-us/library/cc732092.aspx


    Don

    Tuesday, October 06, 2015 8:56 AM
  • They are TCP/IP printers.

    Cheers

    Shane

    Tuesday, October 06, 2015 9:04 AM
  • They are TCP/IP printers.

    Ah, well, TCP/IP Printers, don't use a share on a server at all, so, applying a deny to the printer on the server would have no effect since the users are not using the shared-printer via the server at all.

    TCP/IP Printer connections are bypassing your printer server entirely, the print jobs pass directly from the client PC to the print device.

    Shared Printer would allow you to control (permit/deny), but this means all print jobs will flow via your server, which requires your server to handle that traffic and the spooling via server disk space etc.


    Don

    Tuesday, October 06, 2015 9:20 AM
  • When deploying the printers via computer preferences not user preferences i do not get the option for Shared printer, I only get TCP/IP or Local. I was deploying via user preferences previously but this was slowing the logons down, hence the reason for now using computer preferences to deploy the printers.  
    Tuesday, October 06, 2015 9:43 AM
  • > TCP/IP or Local. I was deploying via user preferences previously but
    > this was slowing the logons down
     
    That's one of the many drawbacks when using GPP to deploy printers :)
    And one of the many reasons why I always recommend to using asynchronous
    scripts for this task.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Tuesday, October 06, 2015 10:32 AM
  • What type of script would you recommend using for deploying printers?
    Tuesday, October 06, 2015 10:50 AM
  • > What type of script would you recommend using for deploying printers?
     
    Whatever you can write/maintain - I use VBS, others use KiX/AutoIT or PoSh.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Tuesday, October 06, 2015 11:29 AM
  • I will give using a script a go. Can you apply a vbs script to run at computer startup or is it best to apply to users?
    Tuesday, October 06, 2015 12:25 PM
  • > I will give using a script a go. Can you apply a vbs script to run at
    > computer startup or is it best to apply to users?
     
    For local printers: Computer startup.
    For mapped printers and setting the default printer: User logon.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    • Marked as answer by Shane W Tuesday, October 06, 2015 2:01 PM
    Tuesday, October 06, 2015 1:55 PM
  • Thanks for your help.
    Tuesday, October 06, 2015 2:01 PM