• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1151
  • Last Modified:

Problem with installing printers through Active Directory (Win2003 R2) onto Windows 7 mushiness

We have been pushing printers’ install/updates through AD (Windows 2003 R2) onto our desktop/laptops successfully for some time now. In AD, based on locations (Main building, West , East, Office, etc.) different OU’s were created and Printer GPO’s were assigned to those OU’s. If the user needs to be relocated onto different building, all we have to do (as IT department) is simply move user’s computer from one OU to another. Next time when user logs on to a wired or wireless network from his/her laptop new printers (for that location) are automatically installed and the old one automatically removed. As I said before, everything works like a dream and the end users never have to install printers manually. We updated printers’ drivers on a Print Server (Windows 2003 R2) and new divers automatically pushed on to the user’s machines automatically.
 
We start rolling out new Windows 7 (32-bit -90%, 64-bit – 10% of all computers) operating system. New compatible with Windows 7 printer drivers were installed and updated on the Print Server. New Printer management console on Windows 7 workstation was used to install and update printer drivers on Print Server (Windows 2003 R2)

Here is my problem. Some of Windows 7 users start complaining that they can’t print!!! Some (but why not all) of the printers are not “pushed” onto they mushiness. Users are local admits on their laptops. When I’m trying to install printers manually, Windows 7 security pop-up asks me to confirm that I really want to install printer?!  After successful manual printer install and testing user go’s happy... and guess what?!   After day or two the same user comes back complaining that he/she can’t print?! I’m trying to delete this printer so I can re-install it again, but Windows 7 say that access to delete is denied!!! I’m a local admin (plus Domain admin) on this laptop, why I can’t delete this printer? Here is more. I downloaded new print drivers and update them on the Print Server. Install and test printing on my and other user’s laptops. Now, Windows 7 users (with older print drivers) complain that they cannot print anymore! Printer driver is not updated on their computers.

Sorry for such a long explanation of my problems. This Windows 7 printer’s problem drives me bananas. I’m guessing that because of new Windows 7 local device installation restriction new GPO needs to be pushed onto Windows 7 mushiness. Users of Windows XP mushiness don’t have any printing problems. Other thing, why I cannot remove printer on some of the Windows 7 mushiness? Why is that “access denied”?
0
Olevo
Asked:
Olevo
  • 8
  • 7
1 Solution
 
evilsiCommented:
HI,
In a test environment (like your own laptop for instance) turn off UAC and see if that makes any difference. Check in the event viewer for any errors / warnings in the following components: "Applications and services logs - Microsoft - Windows - Event collector", group policy and UAC. You should find something in there.
Also in your GPO, do you have the everyone group listed as having access rights to the printer object? i only ask because i was distributing a new set of printers to a group not long ago and as a security requirement we removed the everyone group from the printer object and we then had horrible problems installing them. It was only when we replaced the everyone group the issue was resolved.
0
 
OlevoAuthor Commented:
I have around 15 Print GPO (Office Printers GPO, West building GPO, etc.) - "Authenticate Users" is the only group listed there! I'm not at work today, I'll try tomorrow to add "Everyone" group onto one of Print GPO and let you know. If this the case, I don't understand why all this time we never had any printer issues on XP mushiness? And, why some of the Win7 mushiness have printers installed through AD?
0
 
evilsiCommented:
check the 'everyone' group is applied on the printer object not on the GPO, anly 'Authenticated users' should be on the GPO.  The install method is diffrent on Win 7 than XP..
0
Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

 
OlevoAuthor Commented:
I had checked all printers on Print Server and ‘Everyone’ group is listed under security permissions to print. Printers GPO have ‘Authenticated Users’. What else should I check? How different is install method?
0
 
evilsiCommented:
if you make one of the users a printer manager does that help?
Can you acccess the print server by path from the clients machine?
Does the printer appear offline (dulled icon) in the clients printers and devices window?
0
 
OlevoAuthor Commented:
Hi there, sorry for the delay was quite busy. The problems still exist. What I don't understand is why pushing printers through AD works fine for some but not others users?! Especially users on wireless connections are complaining more.
Just now, I have a uses complaining on not to be able to print to one of the printers. It was working okay yesterday but now is not?! I'm trying to remove this printer so I can reinstalled it manually. Remove device window pop-up saying that: "Access is denied, unable to remove device". This user has full local admin rights on this Windows 7 laptop! Why I cannot remove this printer!
0
 
evilsiCommented:
Hi,
If there are items in the print queue for that user you wont be able to remove the printer.
If you can't delete the printer, right-click it again, click Run as administrator, and then click Delete.
Also right-click it again, click Run as administrator and then delete the print driver.

The run gpupdate /force
You will porbably have to log off and log on again. If GPO processing is working properly the printer should now install. Check event logs for errors / warnings about installation or GPO processing after the logon time.
Si.
0
 
OlevoAuthor Commented:
Hi evilsi,
Nothing in the print queue for this users. When I right click on the printer I don't have "Run as administrator" option?! Where is it? This laptop is running Windows 7 enterprise edition. Current user has full local admin right on this laptop. After restarting this laptops few times (I didn't do gpupdate/force) this user can print test page but some of the MS-Office 2007 word document (why not all) are crashing when you try to print them to this printer?! When I'm printing from Word, Word prints first page of three and... it's closing itself (crashing). And, guess what, this particular word document user can print to other network printer without any problem?! As I said before, I can print printer test page to this printer and other word document (not the troubled one). I would like to remove this printer so I can try to reinstall it, but - access is denied. Thanks a lot for your time, I'm really appreciate your help.
0
 
evilsiCommented:
Are you having any other issues with group policy processing on pc in question. It seems very odd that only the printing services are malfunctioning. Does the user profile load correctly? are other policies being applied correctly?
May be the old wonder of disconnecting the pc from the domain and reconnecting it could solve this one.
Si.
0
 
OlevoAuthor Commented:
Sorry for repeating myself.  When I right click on the printer I don't have "Run as administrator" option?! Where is it? How do you do this? Are you using Windows 7?
0
 
evilsiCommented:
Sorry.. Try either of the following..
Press and hold Ctrl+Shift while opening the program  or
there is a change properties button under the general tab in printer properties, this then asks for UAC password and allows you to change settings.
OR.. last resort..
Start
All Programs
Accessories
Command Prompt, Right Click
Run as Administrator (if that's not there then the reason you don't see it
for the printer is the same and unrelated to printing)
Open Task Manager
terminate the explorer.exe process
from the elevated command prompt type
explorer.exe
(this is now the explorer running in elevated privilege)
try deleting the printer again.
Si.
0
 
OlevoAuthor Commented:
I know that you can run program or installer file as administrator but WHERE and HOW you have "Run as administrator" option for the printers?! I'm must be a noob here but I don't understand your instruction on "enabling" run as administrator option for the printers. Which windows OS are you using ?
0
 
OlevoAuthor Commented:
I didn't get the answers to my questions. Here is my own answers to my own questions. I hope they can by useful for someone who might have similar printer problems.
1. When you start using 64-bit print drivers you have to make sure that version of 32-bit and 64-bit printer drivers on you print server MUST match! In my case, I had missed match version drivers for some of the printers.
2. It was a bit confusing to sorted out this one. Let's say you have one particular ms-word document which you could print on one printer but not another?! However, you can print other ms-word document to this printer with no problems. Problem was (for us anyway) that user was using fancy font and the printer just could print it! As soon as you replaced "confusing for the printer" fond with different font, the printer was happy to print it.
3. On Windows 7 machines sometimes you will see " Local Downlevel Document " in the print queue and your document you're send to print.... which will be never printed. Microsoft confirmed this print issue on Windows 7 machines. Here is what they are saying.
"Starting in Windows Vista and in Windows 7 we introduced Asynchronous RPC which speeds up communication to a Windows 2008/2008 R2 Server. Windows Server 2003 doesn't support this new protocol and when Windows 7 tries to communicate using Async RPC, this is most likely causing the temporary loss of communication.
The result is the blank driver tab and port tab.

The work around is to disable Async RPC by adding the following registry key on the Windows 7/Vista clients:
HKLM\Software\Policies\Microsoft\Windows NT\Printers\EnabledProtocols
Type: DWORD
Data: 6
Moving your print servers to Server 2008/2008 R2 resolves the issue also as they support Asynchronous RPC.
4. Still don't know how to do it. I'm trying to remove printer so I can reinstalled it manually. Remove device window pop-up saying that: "Access is denied, unable to remove device". This user has full local admin rights on this Windows 7 laptop! Why I cannot remove this printer!
====
Thanks evilsi with you help. Again, if you can tell me how do you have option "Run as administrator" on Windows 7 for the printers I'll give points! I don't understand your instruction on "enabling" run as administrator option for the printers.

0
 
evilsiCommented:
Hi,
Unles you have a GPO preventing 'Run As Amdinistrator' enabled you should be able to right click on any printer object in 'printer and devices' and 'Run as administrator' It will have a shield symobol next to it.

Regards
0
 
OlevoAuthor Commented:
Hi evilsi, sorry for being so annoying user but is any chance you could take a screenshot for me from your Windows 7 machine where I can see "Run as Administrator" option when you right click on the printer.
0
 
ee_autoCommented:
Question PAQ'd, 500 points refunded, and stored in the solution database.
0

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

  • 8
  • 7
Tackle projects and never again get stuck behind a technical roadblock.
Join Now