Solved

Windows 7 GP 2008 Printer Deployment

Posted on 2010-11-30
11
1,125 Views
Last Modified: 2012-08-13
I have a user with a win 7 64 Pro virtual machine that will randomly drop one of our printers.  
All other printers deploy correctly to all machines.

When this printer is lost it seems to lose the driver completely.  I try to install manually from the server and it asks id I would like to install the driver, it starts then install then fails with access denied.

The printer is deployed  him and it is added to him in GPP.  I have also set it up for quiet installation ( I forget the name of the actual GP setting)

I am at a loss as this is the only one with the issue and it happens to be the color printer.

We have multiple Win 7 64 virtual machine and multiple win 7 32 desktops as well as XP machines that have no issues with the installation.
0
Comment
Question by:CHutchins
  • 9
11 Comments
 
LVL 4

Expert Comment

by:tausifsfarid
Comment Utility
Hi,

Please refer to the below link: http://technet.microsoft.com/en-us/library/cc731292.aspx
0
 
LVL 4

Author Comment

by:CHutchins
Comment Utility
umm Yeah I am well past that.
as I said multiple printers work, including this one on all other machines.  in fact I believe that is the technote I used in setting up the GPP.
0
 
LVL 4

Expert Comment

by:kabix
Comment Utility
Seems like it could be a permission issue. There should be an issue when installing manually. Files could be on the machine but have no registry permissions or other way around.
0
 
LVL 4

Author Comment

by:CHutchins
Comment Utility
I thought the same thing, but went in and the permissions on the printer are correct, and I elevated the user to a local admin for testing and had the same issue.  The issue is definitely something with what GPP does with the printers from what I can see.

But to my understanding setting up the Config to allow the silent install should resolve this issue, but to further it I have raised users to power users on the computers as well which should be enough to install printers.

And like I said this only happens to him not other users and multiple users are set up identically.
0
 
LVL 4

Author Comment

by:CHutchins
Comment Utility
The issue is still occurring for this one user no matter how I change the policy.  It works for everyone else, but this user it does not work for.  I even went as far as changing him to a different OU which I have tested and I know is working and has the same issue.

I cannot install the printer and it should be able to.  My only thought is maybe the driver is going to have to be installed as an admin, but I elevated him to local admin and had the same issue.  Ay other ideas out there?
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 4

Author Comment

by:CHutchins
Comment Utility
I guess the question is what permissions am I missing?  They have permissions to the printer and they have power user permission, I don't see anything else, and I am now seeing the issue randomly about the network.
0
 
LVL 4

Author Comment

by:CHutchins
Comment Utility
I just found this
There are TWO "Point and Print Restrictions" settings

    Computer Configuration/Policies/Administrative Templates/Printers/Point and Print Restrictions
    User Configuration/Policies/Administrative Templates/Control Panel/Printers/Point and Print Restrictions


Of these two, the one under Computer Configuration seems to be the important one. But guess what? The original Server 2008 doesn't include this setting in the list -- you need Server 2008 R2 for this setting to show up. If you download the administrative templates from Server 2008 R2, extract, and copy the PolicyDefinitions folder to C:\Windows\sysvol\domain\Policies\PolicyDefinitions, this missing policy will show up magically in Group Policy Management Editor. Of course, the ADMX files from Server 2008 R2 causes Group Policy Management Editor from Server 2008 to complain about parse errors, but it works just fine to click "OK".


Once you've installed the proper ADMX files, for this to work in Windows 7, configure both of these "Point and Print Restrictions" settings to:

    Enabled
    Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt
    Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt


Also, don't forget to make sure the users have permission to install printer drivers, since you're not even going to try to use Admin privileges any more:

    Computer Configuration\Policies\Administrative Templates\System\Driver Installation
    The setting is called "Allow non-administrators to install drivers for these devices setup classes".
    You will need to add the device class GUID of printers:  {4d36e979-e325-11ce-bfc1-08002be10318}



I now applied it at the domain level policy on the computer and user config side and will see if this works.

Reference : http://social.technet.microsoft.com/Forums/en/w7itpronetworking/thread/532e101e-424d-45c8-b984-1adf33d9744d
0
 
LVL 4

Author Comment

by:CHutchins
Comment Utility
and yet another step.  I am now logged in as the administrator trying to remove all printers and print driver packages and as the domain admin I cannot remove printers, and there are no printers set for the Admin group.
0
 
LVL 4

Author Comment

by:CHutchins
Comment Utility
I have now made another step.  I am setting it to remove the printer at step 3 and then add it back will see if this works.
0
 
LVL 4

Accepted Solution

by:
CHutchins earned 0 total points
Comment Utility
For anyone having the issue, this appears to resolve the problem.
Set up a GPP to remove the printer and then set up a GPP to add the printer back. Obviously make sure the order run has the delete first and the add second.  This will also work for driver issues as I am finding.  It will remove the driver package and push the new driver package as far as I can tell as I found another issue with some users on a B&W printer using an older driver for the printer.
0
 
LVL 4

Author Closing Comment

by:CHutchins
Comment Utility
The Expert Responses were all Initial setup, and the initial setup had already been completed and was working for most users.
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

First some basics on Windows 7 Backup.  It has 2 components one is a file based backup which is stored in .zip files each zip is split at around 200 Megabytes and there is the Image Backup which is as the name implies a total image of the partition …
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup". After a while, you have entered a loop for Auto repair which does not fix anything and you will be in a  panic as all your work w…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now