Solved

Deploying printers using con2prt with Server 2008 / Vista / 7

Posted on 2009-05-11
4
7,247 Views
Last Modified: 2012-05-06
We have been using the con2prt.exe tool succesfully in our login script for over years now.
Now with the new server 2008, Vista and 7 generation, this tool won't do it anymore.
With Vista it runs very slow. With 7 RC1 the question pops up if you trust this printer and if so you can run the install after a administrator login.

We have been testing the server 2008 option to deploy the printer with group policy in Vista and 7. But this doesn't work, the printers don't appear unless you first install the printer drivers manually as administrator. We tried through GPO Preferences/Control Panel Settings/Printers. But the same thing happens here, the printers don't appear unless you first install the printer drivers manually as administrator.

This is not a fine way for deploying the printers. Does anybody have the golden tip on how to solve this, without having to ad a runas /user:administrator command with a password into the login script?
0
Comment
Question by:NicoNL
  • 3
4 Comments
 
LVL 15

Accepted Solution

by:
tenaj-207 earned 500 total points
Comment Utility
Tip (may or may not be golden)

Change this key, HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ Policies\system\LocalAccountTokenFilterPolicy to a 1.  Then reboot the computers.
http://support.microsoft.com/default.aspx/kb/951016

This should allow you to use con2prt successfully.  Also try using PSExec (http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx) to launch a batch file to install the printers.
0
 

Author Comment

by:NicoNL
Comment Utility
Thank you for your tips. We would like to keep UAC activated and move towards having local administrator right removed from all users desktops. I'm going to try using PSExec. I'll get back to you on this later.

Kind regards,
NicoNL
0
 

Author Comment

by:NicoNL
Comment Utility
I've tried PSExec. Do you know what could be blocking the execution of PSExec on the remote PC? PSexec won't start on many desktops, It isn't the firewall blocking it.

Anyway when using HP universal printer driver, install both the PCL5 and the PCL6 version. Some HP printers do work with the PCL5 version, but won't with the PCL6 version. So that leaves us with a Nashuatec and Ricoh printer lacking the right drivers for server 2008 x64/W32.

We also used
0
 

Author Comment

by:NicoNL
Comment Utility
We also used GPO User Configuration/Policies/Windows Settings/Scripts/Logon
pushprinterconnections.exe -log

and

Computer Configuration/Policies/Administrative Template/Policy definitions
Allow non-administrators to install drivers for these device setup classes
{4658ee7e-f050-11d1-b6bd-00c04fa372a7}
{4d36e979-e325-11ce-bfc1-08002be10318}
 
So we made some priogress.

Kind regards
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
A safe way to clean winsxs folder from your windows server 2008 R2 editions
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now