User Tools

Site Tools


networking:windows:printer_shared_gpp

This is an old revision of the document!


Sharing Network Printers Using Group Policy Preferences

Printer Sharing Overview

  • Install Windows Print and Document Services server role
    • Usually on a domain controller and/or file server
  • Disable Client Side Rendering (CSR) for all shared printers
    • Keeps RDS server from processing all the print data
  • Use universal printer drivers where possible
  • Use Winprint print processor for all shared printers
  • Use Group Policy Preference (GPP) to push printers and set default
    • Filter by user groups
    • Create a GPP and user group for each printer that will be someone's default printer
    • Each GPP will attach all desired printers for members of the user group
  • Use a Delete all shared printers preference as first step in GPP

GPP Overview

  • Create a Computer or User policy (we generally use User for connecting to network printers)
  • Start with a Delete All action
  • Add all printers the user should have
  • Set one as the Default Printer
  • Use Update (CRUD)
    • Update will change the Default Printer every login
    • Create will only set the Default Printer at creation time
  • Create a policy for each printer that will be someone's default printer
  • Filter by a user group
    • Create a new user group for each printer that will be someone's default printer
    • Add users to the group which will determine their default printer
    • Make sure users are not in multiple 'Printer' groups
Keep in mind that if you are going to configure Internet Options, set a default Printer, or edit the Start Menu, the GPO will need to be linked to a user OU or a computer OU with Loopback enabled.

Install and Share Printer

:!: Do not Deploy printers using Print Management (printmanagement.msc) as that uses Group Policy instead of Group Policy Preferences to push out the printers.

Install and share the printer using Print Management (printmanagement.msc).

Add all necessary drivers (x86 and x64). The different drivers for the same printer must be the same version (name) exactly.

Create a User Group

Using Active Directory Users and Computers (dsa.msc), add a group like Printer Printername.

Add users to the group whose default printer will be Printername. Make sure users are not members of any other similar 'Printer' groups.

Create a Group Policy Preference

Group Policy Preference for Shared Printers

:!: You can also copy and edit an existing printer GPP if you have one.

Using Group Policy Management (gpmc.msc), add a Group Policy Preference:

  1. Run gpmc.msc
  2. Expand Forest → Domains → yourdomain.local
  3. On your desired AD container, right-click → Create a GPO in this domain and link it here
    • Name it Printers - NewPrinterName
  4. Select the new GPP
  5. Change the Security Filtering to the new user group created above
  6. Right-click the new GPP → Edit
    1. Expand User Configuration → Preferences → Control Panel Settings → Printers
    2. Add a Delete action and select Delete all shared printer connections
    3. Add an Update action
      1. Select the appropriate shared printer (that will be the default printer for group members)
      2. Select Set this printer as the default printer
    4. Add another Update action for each other shared printer for group members
      1. Do not select any other printer as default

Troubleshooting

PowerShell

This command lists printers with problems:

Get-Printer –ComputerName PrintServer | Where PrinterStatus -ne Normal | select Name,PrinterStatus,Portname | Out-GridView

Set all printers to use WinPrint print processor:

Get-Printer –ComputerName PrintServer | Where PrintProcessor -ne "WinPrint" | Set-Printer –ComputerName PrintServer –PrintProcessor WinPrint

Event ID 4098

Event Viewer → Windows Logs → Application

Windows 7?

Event Viewer → Application and Services Logs → Microsoft → Windows → Group Policy

Group Policy Updates

  1. Run gpupdate /force on the Domain Controller
  2. Run gpupdate /force on the RDS server
  3. Log the test user out
  4. Log the test user back in and printers should appear in Devices and Printers (control printers)
networking/windows/printer_shared_gpp.1492193632.txt.gz · Last modified: 2017/04/14 12:13 by gcooper