Virtual Architects Support Wiki

User Tools

Site Tools

You are here: start » networking » windows » printer_shared_gpp
Trace: • omnios
networking:windows:printer_shared_gpp

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
networking:windows:printer_shared_gpp [2016/10/31 12:23]
gcooper 		networking:windows:printer_shared_gpp [2017/06/04 12:05] (current)
gcooper
Line 3: Line 3:
 See also **[[networking:windows:printer_shared|Shared Network Printers]]** See also **[[networking:windows:printer_shared|Shared Network Printers]]**
  
-===== Printer Sharing Overview =====+https://deployhappiness.com/deploying-printers-with-group-policy-preferences/
  
 https://www.simple-talk.com/sysadmin/general/managing-printers-with-group-policy,-powershell,-and-print-management/ https://www.simple-talk.com/sysadmin/general/managing-printers-with-group-policy,-powershell,-and-print-management/
 +
 +**GPP Best Practices**: https://deployhappiness.com/best-practices-for-group-policy-printer-preferences/
 +
 +**HP Universal Printer Drivers**: http://h20331.www2.hp.com/Hpsub/cache/344305-0-0-225-121.html
 +
 +===== Printer Sharing Overview =====
  
   * Install Windows **Print and Document Services** server role    * Install Windows **Print and Document Services** server role 
Line 33: Line 39:
     * **Add users** to the group which will determine their default printer     * **Add users** to the group which will determine their default printer
     * Make sure users are **not in multiple 'Printer' groups**     * Make sure users are **not in multiple 'Printer' groups**
 +    * **Add** ''Domain Computers'' **group** with ''Read'' permissions to the **Delegations tab**
 +    * The **Computer account** must have ''Read'' permissions to the GPO even though the GPO is **linked to a User container**
  
 <note important>Keep in mind that if you are going to **configure Internet Options**, **set a default Printer**, or **edit the Start Menu**, the GPO will need to be **linked to a user OU** or a computer OU with Loopback enabled.</note> <note important>Keep in mind that if you are going to **configure Internet Options**, **set a default Printer**, or **edit the Start Menu**, the GPO will need to be **linked to a user OU** or a computer OU with Loopback enabled.</note>
 +
 +<note>A recent [[https://blogs.technet.microsoft.com/askds/2016/06/22/deploying-group-policy-security-update-ms16-072-kb3163622/|Windows security update]] has changed how group policies are processed.  Prior to the update, policies were processed in the user context.  Now, policies are processed in the computer context.  This is why we now **add the group** ''Domain Computers'' **to the Delegations tab** with Read permissions to the GPO.</note>
  
 ===== Install and Share Printer ===== ===== Install and Share Printer =====
Line 58: Line 68:
 Using Group Policy Management (''gpmc.msc''), add a Group Policy Preference: Using Group Policy Management (''gpmc.msc''), add a Group Policy Preference:
  
-  - Run ''gpmc.msc'' +  - **Run** ''gpmc.msc'' 
-  - Expand Forest -> Domains -> yourdomain.local +    * Expand **Forest -> Domains -> yourdomain.local** 
-  - On your desired AD container, right-click -> ''Create a GPO in this domain and link it here''+  - On your desired AD container, right-click -> **Create a GPO in this domain and link it here**
     * Name it ''Printers - NewPrinterName''     * Name it ''Printers - NewPrinterName''
-  - Select the new GPP +  - **Select** the new GPP 
-  - Change the ''Security Filtering'' to the new user group created above +    * **Change** the **Security Filtering** to the new user group created above 
-  - Right-click the new GPP -> ''Edit'' +  - **Select** the **Delegations** tab 
-    - Expand **User Configuration -> Preferences -> Control Panel Settings -> Printers** +    * **Add** the ''Domain Computers'' group with ''Read'' permissions 
-    - Add a **Delete** action and select **Delete all shared printer connections** +  - **Edit** the new GPP 
-    - Add an **Update** action +    * Right-click -> Edit 
-      - Select the appropriate **shared printer** (that will be the default printer for group members) +    * Expand **User Configuration -> Preferences -> Control Panel Settings -> Printers** 
-      - Select **Set this printer as the default printer** +  - **Add** a **Delete** action 
-    - Add another **Update** action for each other shared printer for group members+    * Select **Delete all shared printer connections** 
 +    * Must be the first action 
 +  - **Add** an **Update** action 
 +    * Select the appropriate **shared printer** that will be the default printer for group members 
 +    * Select **Set this printer as the default printer** 
 +  - Add another **Update** action **for each shared printer** for group members 
 +    * Do **not** select any other printer as default
  
 ===== Troubleshooting ===== ===== Troubleshooting =====
  
-https://deployhappiness.com/group-policy-preferences-not-applying/+**GPP Not Applying**: https://deployhappiness.com/group-policy-preferences-not-applying/ 
 + 
 +https://deployhappiness.com/series/group-policy-troubleshooting/ 
 + 
 +https://technet.microsoft.com/en-us/library/cc749336(v=ws.10).aspx 
 + 
 +==== PowerShell ==== 
 + 
 +This command lists printers with problems: 
 + 
 +<file> 
 +Get-Printer –ComputerName PrintServer | Where PrinterStatus -ne Normal | select Name,PrinterStatus,Portname | Out-GridView 
 +</file> 
 + 
 +Set all printers to use WinPrint print processor: 
 + 
 +<file> 
 +Get-Printer –ComputerName PrintServer | Where PrintProcessor -ne "WinPrint" | Set-Printer –ComputerName PrintServer –PrintProcessor WinPrint 
 +</file>
  
 ==== Event ID 4098 ==== ==== Event ID 4098 ====
Line 83: Line 117:
  
 **Event Viewer -> Application and Services Logs -> Microsoft -> Windows -> Group Policy** **Event Viewer -> Application and Services Logs -> Microsoft -> Windows -> Group Policy**
 +
 +==== Group Policy Updates ====
 + 
 +  - Run ''gpupdate /force'' on the Domain Controller
 +  - Run ''gpupdate /force'' on the RDS server
 +  - Log the test user out
 +  - Log the test user back in and printers should appear in Devices and Printers (''control printers'')
networking/windows/printer_shared_gpp.1477938230.txt.gz · Last modified: 2016/10/31 12:23 by gcooper

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
CC Attribution-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki