Both sides previous revision
Previous revision
Next revision
|
Previous revision
|
networking:windows:printer_shared_gpp [2017/06/04 11:33] gcooper |
networking:windows:printer_shared_gpp [2017/06/04 12:05] (current) gcooper |
<note important>Keep in mind that if you are going to **configure Internet Options**, **set a default Printer**, or **edit the Start Menu**, the GPO will need to be **linked to a user OU** or a computer OU with Loopback enabled.</note> | <note important>Keep in mind that if you are going to **configure Internet Options**, **set a default Printer**, or **edit the Start Menu**, the GPO will need to be **linked to a user OU** or a computer OU with Loopback enabled.</note> |
| |
<note>A recent [[https://blogs.technet.microsoft.com/askds/2016/06/22/deploying-group-policy-security-update-ms16-072-kb3163622/|Windows security update]] has changed how group policies are processed. Prior to the update, policies were processed in the user context. Now, policies are processed in the computer context. This is why we now add the group ''Domain Computers'' with Read permissions to the GPO.</note> | <note>A recent [[https://blogs.technet.microsoft.com/askds/2016/06/22/deploying-group-policy-security-update-ms16-072-kb3163622/|Windows security update]] has changed how group policies are processed. Prior to the update, policies were processed in the user context. Now, policies are processed in the computer context. This is why we now **add the group** ''Domain Computers'' **to the Delegations tab** with Read permissions to the GPO.</note> |
| |
===== Install and Share Printer ===== | ===== Install and Share Printer ===== |
Using Group Policy Management (''gpmc.msc''), add a Group Policy Preference: | Using Group Policy Management (''gpmc.msc''), add a Group Policy Preference: |
| |
- Run ''gpmc.msc'' | - **Run** ''gpmc.msc'' |
- Expand **Forest -> Domains -> yourdomain.local** | * Expand **Forest -> Domains -> yourdomain.local** |
- On your desired AD container, right-click -> **Create a GPO in this domain and link it here** | - On your desired AD container, right-click -> **Create a GPO in this domain and link it here** |
* Name it ''Printers - NewPrinterName'' | * Name it ''Printers - NewPrinterName'' |
- **Select** the new GPP | - **Select** the new GPP |
- Change the **Security Filtering** to the new user group created above | * **Change** the **Security Filtering** to the new user group created above |
- Right-click the new GPP -> **Edit** | - **Select** the **Delegations** tab |
- Expand **User Configuration -> Preferences -> Control Panel Settings -> Printers** | * **Add** the ''Domain Computers'' group with ''Read'' permissions |
- Add a **Delete** action and select **Delete all shared printer connections** | - **Edit** the new GPP |
- Add an **Update** action | * Right-click -> Edit |
- Select the appropriate **shared printer** (that will be the default printer for group members) | * Expand **User Configuration -> Preferences -> Control Panel Settings -> Printers** |
- Select **Set this printer as the default printer** | - **Add** a **Delete** action |
- Add another **Update** action for each other shared printer for group members | * Select **Delete all shared printer connections** |
- Do **not** select any other printer as default | * Must be the first action |
| - **Add** an **Update** action |
| * Select the appropriate **shared printer** that will be the default printer for group members |
| * Select **Set this printer as the default printer** |
| - Add another **Update** action **for each shared printer** for group members |
| * Do **not** select any other printer as default |
| |
===== Troubleshooting ===== | ===== Troubleshooting ===== |