Solved

Windows 7 GP 2008 Printer Deployment

Posted on 2010-11-30
11
1,130 Views
Last Modified: 2012-08-13
I have a user with a win 7 64 Pro virtual machine that will randomly drop one of our printers.  
All other printers deploy correctly to all machines.

When this printer is lost it seems to lose the driver completely.  I try to install manually from the server and it asks id I would like to install the driver, it starts then install then fails with access denied.

The printer is deployed  him and it is added to him in GPP.  I have also set it up for quiet installation ( I forget the name of the actual GP setting)

I am at a loss as this is the only one with the issue and it happens to be the color printer.

We have multiple Win 7 64 virtual machine and multiple win 7 32 desktops as well as XP machines that have no issues with the installation.
0
Comment
Question by:CHutchins
  • 9
11 Comments
 
LVL 4

Expert Comment

by:tausifsfarid
ID: 34242543
Hi,

Please refer to the below link: http://technet.microsoft.com/en-us/library/cc731292.aspx
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34242584
umm Yeah I am well past that.
as I said multiple printers work, including this one on all other machines.  in fact I believe that is the technote I used in setting up the GPP.
0
 
LVL 4

Expert Comment

by:kabix
ID: 34244850
Seems like it could be a permission issue. There should be an issue when installing manually. Files could be on the machine but have no registry permissions or other way around.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 4

Author Comment

by:CHutchins
ID: 34247994
I thought the same thing, but went in and the permissions on the printer are correct, and I elevated the user to a local admin for testing and had the same issue.  The issue is definitely something with what GPP does with the printers from what I can see.

But to my understanding setting up the Config to allow the silent install should resolve this issue, but to further it I have raised users to power users on the computers as well which should be enough to install printers.

And like I said this only happens to him not other users and multiple users are set up identically.
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34285014
The issue is still occurring for this one user no matter how I change the policy.  It works for everyone else, but this user it does not work for.  I even went as far as changing him to a different OU which I have tested and I know is working and has the same issue.

I cannot install the printer and it should be able to.  My only thought is maybe the driver is going to have to be installed as an admin, but I elevated him to local admin and had the same issue.  Ay other ideas out there?
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34286624
I guess the question is what permissions am I missing?  They have permissions to the printer and they have power user permission, I don't see anything else, and I am now seeing the issue randomly about the network.
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34286899
I just found this
There are TWO "Point and Print Restrictions" settings

    Computer Configuration/Policies/Administrative Templates/Printers/Point and Print Restrictions
    User Configuration/Policies/Administrative Templates/Control Panel/Printers/Point and Print Restrictions


Of these two, the one under Computer Configuration seems to be the important one. But guess what? The original Server 2008 doesn't include this setting in the list -- you need Server 2008 R2 for this setting to show up. If you download the administrative templates from Server 2008 R2, extract, and copy the PolicyDefinitions folder to C:\Windows\sysvol\domain\Policies\PolicyDefinitions, this missing policy will show up magically in Group Policy Management Editor. Of course, the ADMX files from Server 2008 R2 causes Group Policy Management Editor from Server 2008 to complain about parse errors, but it works just fine to click "OK".


Once you've installed the proper ADMX files, for this to work in Windows 7, configure both of these "Point and Print Restrictions" settings to:

    Enabled
    Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt
    Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt


Also, don't forget to make sure the users have permission to install printer drivers, since you're not even going to try to use Admin privileges any more:

    Computer Configuration\Policies\Administrative Templates\System\Driver Installation
    The setting is called "Allow non-administrators to install drivers for these devices setup classes".
    You will need to add the device class GUID of printers:  {4d36e979-e325-11ce-bfc1-08002be10318}



I now applied it at the domain level policy on the computer and user config side and will see if this works.

Reference : http://social.technet.microsoft.com/Forums/en/w7itpronetworking/thread/532e101e-424d-45c8-b984-1adf33d9744d
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34302305
and yet another step.  I am now logged in as the administrator trying to remove all printers and print driver packages and as the domain admin I cannot remove printers, and there are no printers set for the Admin group.
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34303344
I have now made another step.  I am setting it to remove the printer at step 3 and then add it back will see if this works.
0
 
LVL 4

Accepted Solution

by:
CHutchins earned 0 total points
ID: 34370107
For anyone having the issue, this appears to resolve the problem.
Set up a GPP to remove the printer and then set up a GPP to add the printer back. Obviously make sure the order run has the delete first and the add second.  This will also work for driver issues as I am finding.  It will remove the driver package and push the new driver package as far as I can tell as I found another issue with some users on a B&W printer using an older driver for the printer.
0
 
LVL 4

Author Closing Comment

by:CHutchins
ID: 34407449
The Expert Responses were all Initial setup, and the initial setup had already been completed and was working for most users.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A safe way to clean winsxs folder from your windows server 2008 R2 editions
Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html) provided 218 attendees with a step-by-step guide for identifying Acti…
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now