• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3054
  • Last Modified:

User loopback processing of Group Policy for computer based printers

I am a little lost with setting up Loopback processing in Group Policy. I have found this link and still need a little help. I want to set up printers on each computer. So no matter what user logs on, that user gets the printers for that workstation.

1. I need to add an object to an OU in Active Directory that I will point the script to in Group Policy. Do I put the users or computers in the OU in AD?
2. I have the 4 different vbs scripts to map printers for 4 different locations. Once Loopback Processing is enabled, where do I put these scripts? I am guessing I put them in the Users Startup Scripts in Group Policy?

Sorry if I am confused..Any help will be awesome!
1 Solution
Usually, user configuration policies apply only to user objects in or below the OU to which the GPO is linked.
Loopback processing enables you to apply *user* specific policies depending on the OU in which the *computer* object is that the user is logging on to.
So first you should create a GPO "Loopback" or whatever, enable the loopback setting (probably in Merge mode in your case), and link this GPO to the OU in which the workstations are (start with a test OU first until you're feeling comfortable with this).
Then you can create additional GPOs with user configuration settings linked to the same (computer!) OU. These policies will be applied to *all* users logging on to these workstations.
To exclude administrators, use the security group filtering. Do the following: For every GPO, create a global security group named, for example, GPol<GPO name> (*G*lobal *Pol*icy group for GPO <name>). Make the desired users member of this group. In the security settings for the GPO, remove the "Apply Policy" and "Read policy" right for the default "Authenticated Users", add it for the proper security group instead.
The scripts should then be defined in the User Logon Scripts section ("Startup" is a computer setting).

Loopback Processing of Group Policy
Mike KlineCommented:
You could also try the printer location tracking feature

Enable printer location tracking

The users would have to know how to search for printers but this way you could map the GPO to your computer OU.
Forced accept.

Community Support Moderator

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now