User Tools

Site Tools


networking:windows:printer_shared_gpp

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
networking:windows:printer_shared_gpp [2016/10/31 15:01]
gcooper
networking:windows:printer_shared_gpp [2017/06/04 12:05] (current)
gcooper
Line 3: Line 3:
 See also **[[networking:windows:printer_shared|Shared Network Printers]]** See also **[[networking:windows:printer_shared|Shared Network Printers]]**
  
-===== Printer Sharing Overview =====+https://deployhappiness.com/deploying-printers-with-group-policy-preferences/
  
 https://www.simple-talk.com/sysadmin/general/managing-printers-with-group-policy,-powershell,-and-print-management/ https://www.simple-talk.com/sysadmin/general/managing-printers-with-group-policy,-powershell,-and-print-management/
 +
 +**GPP Best Practices**: https://deployhappiness.com/best-practices-for-group-policy-printer-preferences/
 +
 +**HP Universal Printer Drivers**: http://h20331.www2.hp.com/Hpsub/cache/344305-0-0-225-121.html
 +
 +===== Printer Sharing Overview =====
  
   * Install Windows **Print and Document Services** server role    * Install Windows **Print and Document Services** server role 
Line 33: Line 39:
     * **Add users** to the group which will determine their default printer     * **Add users** to the group which will determine their default printer
     * Make sure users are **not in multiple 'Printer' groups**     * Make sure users are **not in multiple 'Printer' groups**
 +    * **Add** ''Domain Computers'' **group** with ''Read'' permissions to the **Delegations tab**
 +    * The **Computer account** must have ''Read'' permissions to the GPO even though the GPO is **linked to a User container**
  
 <note important>Keep in mind that if you are going to **configure Internet Options**, **set a default Printer**, or **edit the Start Menu**, the GPO will need to be **linked to a user OU** or a computer OU with Loopback enabled.</note> <note important>Keep in mind that if you are going to **configure Internet Options**, **set a default Printer**, or **edit the Start Menu**, the GPO will need to be **linked to a user OU** or a computer OU with Loopback enabled.</note>
 +
 +<note>A recent [[https://blogs.technet.microsoft.com/askds/2016/06/22/deploying-group-policy-security-update-ms16-072-kb3163622/|Windows security update]] has changed how group policies are processed.  Prior to the update, policies were processed in the user context.  Now, policies are processed in the computer context.  This is why we now **add the group** ''Domain Computers'' **to the Delegations tab** with Read permissions to the GPO.</note>
  
 ===== Install and Share Printer ===== ===== Install and Share Printer =====
Line 58: Line 68:
 Using Group Policy Management (''gpmc.msc''), add a Group Policy Preference: Using Group Policy Management (''gpmc.msc''), add a Group Policy Preference:
  
-  - Run ''gpmc.msc'' +  - **Run** ''gpmc.msc'' 
-  Expand **Forest -> Domains -> yourdomain.local**+    Expand **Forest -> Domains -> yourdomain.local**
   - On your desired AD container, right-click -> **Create a GPO in this domain and link it here**   - On your desired AD container, right-click -> **Create a GPO in this domain and link it here**
     * Name it ''Printers - NewPrinterName''     * Name it ''Printers - NewPrinterName''
   - **Select** the new GPP   - **Select** the new GPP
-  - Change the **Security Filtering** to the new user group created above +    * **Change** the **Security Filtering** to the new user group created above 
-  - Right-click the new GPP -**Edit** +  - **Select** the **Delegations** tab 
-    - Expand **User Configuration -> Preferences -> Control Panel Settings -> Printers** +    * **Add** the ''Domain Computers'' group with ''Read'' permissions 
-    - Add a **Delete** action and select **Delete all shared printer connections** +  - **Edit** the new GPP 
-    - Add an **Update** action +    * Right-click -> Edit 
-      Select the appropriate **shared printer** (that will be the default printer for group members) +    * Expand **User Configuration -> Preferences -> Control Panel Settings -> Printers** 
-      Select **Set this printer as the default printer** +  **Add** a **Delete** action 
-    - Add another **Update** action for each other shared printer for group members +    * Select **Delete all shared printer connections** 
-      Do **not** select any other printer as default+    * Must be the first action 
 +  **Add** an **Update** action 
 +    Select the appropriate **shared printer** that will be the default printer for group members 
 +    Select **Set this printer as the default printer** 
 +  - Add another **Update** action **for each shared printer** for group members 
 +    Do **not** select any other printer as default
  
 ===== Troubleshooting ===== ===== Troubleshooting =====
Line 81: Line 96:
 https://technet.microsoft.com/en-us/library/cc749336(v=ws.10).aspx https://technet.microsoft.com/en-us/library/cc749336(v=ws.10).aspx
  
-==== List Printers ====+==== PowerShell ====
  
 This command lists printers with problems: This command lists printers with problems:
Line 87: Line 102:
 <file> <file>
 Get-Printer –ComputerName PrintServer | Where PrinterStatus -ne Normal | select Name,PrinterStatus,Portname | Out-GridView Get-Printer –ComputerName PrintServer | Where PrinterStatus -ne Normal | select Name,PrinterStatus,Portname | Out-GridView
 +</file>
 +
 +Set all printers to use WinPrint print processor:
 +
 +<file>
 +Get-Printer –ComputerName PrintServer | Where PrintProcessor -ne "WinPrint" | Set-Printer –ComputerName PrintServer –PrintProcessor WinPrint
 </file> </file>
  
networking/windows/printer_shared_gpp.1477947707.txt.gz · Last modified: 2016/10/31 15:01 by gcooper