Differences

This shows you the differences between two versions of the page.

--- networking:windows:printer_shared_gpp [2017/04/18 11:58]
gcooper
+++ networking:windows:printer_shared_gpp [2017/06/04 12:05] (current)
gcooper
@@ Line 39: / Line 39: @@
     * **Add users** to the group which will determine their default printer
     * Make sure users are **not in multiple 'Printer' groups**
-  * **Add** ''Domain Computers'' group with ''Read'' permissions to the **Delegations tab**
+    * **Add** ''Domain Computers'' **group** with ''Read'' permissions to the **Delegations tab**
-    * The computer account must have ''Read'' permissions to the GPO even though the GPO is linked to a User container
+    * The **Computer account** must have ''Read'' permissions to the GPO even though the GPO is **linked to a User container**
 <note important>Keep in mind that if you are going to **configure Internet Options**, **set a default Printer**, or **edit the Start Menu**, the GPO will need to be **linked to a user OU** or a computer OU with Loopback enabled.</note>
+<note>A recent [[https://blogs.technet.microsoft.com/askds/2016/06/22/deploying-group-policy-security-update-ms16-072-kb3163622/|Windows security update]] has changed how group policies are processed.  Prior to the update, policies were processed in the user context.  Now, policies are processed in the computer context.  This is why we now **add the group** ''Domain Computers'' **to the Delegations tab** with Read permissions to the GPO.</note>
 ===== Install and Share Printer =====
@@ Line 66: / Line 68: @@
 Using Group Policy Management (''gpmc.msc''), add a Group Policy Preference:
-  - Run ''gpmc.msc''
+  - **Run** ''gpmc.msc''
-  - Expand **Forest -> Domains -> yourdomain.local**
+    * Expand **Forest -> Domains -> yourdomain.local**
   - On your desired AD container, right-click -> **Create a GPO in this domain and link it here**
     * Name it ''Printers - NewPrinterName''
   - **Select** the new GPP
-  - Change the **Security Filtering** to the new user group created above
+    * **Change** the **Security Filtering** to the new user group created above
-  - Right-click the new GPP -> **Edit**
+  - **Select** the **Delegations** tab
-    - Expand **User Configuration -> Preferences -> Control Panel Settings -> Printers**
+    * **Add** the ''Domain Computers'' group with ''Read'' permissions
-    - Add a **Delete** action and select **Delete all shared printer connections**
+  - **Edit** the new GPP
-    - Add an **Update** action
+    * Right-click -> Edit
-      - Select the appropriate **shared printer** (that will be the default printer for group members)
+    * Expand **User Configuration -> Preferences -> Control Panel Settings -> Printers**
-      - Select **Set this printer as the default printer**
+  - **Add** a **Delete** action
-    - Add another **Update** action for each other shared printer for group members
+    * Select **Delete all shared printer connections**
-      - Do **not** select any other printer as default
+    * Must be the first action
+  - **Add** an **Update** action
+    * Select the appropriate **shared printer** that will be the default printer for group members
+    * Select **Set this printer as the default printer**
+  - Add another **Update** action **for each shared printer** for group members
+    * Do **not** select any other printer as default
 ===== Troubleshooting =====

Virtual Architects Support Wiki

User Tools

Site Tools

Differences

Page Tools