Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Windows 7 GP 2008 Printer Deployment

Posted on 2010-11-30
11
Medium Priority
?
1,146 Views
Last Modified: 2012-08-13
I have a user with a win 7 64 Pro virtual machine that will randomly drop one of our printers.  
All other printers deploy correctly to all machines.

When this printer is lost it seems to lose the driver completely.  I try to install manually from the server and it asks id I would like to install the driver, it starts then install then fails with access denied.

The printer is deployed  him and it is added to him in GPP.  I have also set it up for quiet installation ( I forget the name of the actual GP setting)

I am at a loss as this is the only one with the issue and it happens to be the color printer.

We have multiple Win 7 64 virtual machine and multiple win 7 32 desktops as well as XP machines that have no issues with the installation.
0
Comment
Question by:CHutchins
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 9
11 Comments
 
LVL 4

Expert Comment

by:tausifsfarid
ID: 34242543
Hi,

Please refer to the below link: http://technet.microsoft.com/en-us/library/cc731292.aspx
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34242584
umm Yeah I am well past that.
as I said multiple printers work, including this one on all other machines.  in fact I believe that is the technote I used in setting up the GPP.
0
 
LVL 4

Expert Comment

by:kabix
ID: 34244850
Seems like it could be a permission issue. There should be an issue when installing manually. Files could be on the machine but have no registry permissions or other way around.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
LVL 4

Author Comment

by:CHutchins
ID: 34247994
I thought the same thing, but went in and the permissions on the printer are correct, and I elevated the user to a local admin for testing and had the same issue.  The issue is definitely something with what GPP does with the printers from what I can see.

But to my understanding setting up the Config to allow the silent install should resolve this issue, but to further it I have raised users to power users on the computers as well which should be enough to install printers.

And like I said this only happens to him not other users and multiple users are set up identically.
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34285014
The issue is still occurring for this one user no matter how I change the policy.  It works for everyone else, but this user it does not work for.  I even went as far as changing him to a different OU which I have tested and I know is working and has the same issue.

I cannot install the printer and it should be able to.  My only thought is maybe the driver is going to have to be installed as an admin, but I elevated him to local admin and had the same issue.  Ay other ideas out there?
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34286624
I guess the question is what permissions am I missing?  They have permissions to the printer and they have power user permission, I don't see anything else, and I am now seeing the issue randomly about the network.
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34286899
I just found this
There are TWO "Point and Print Restrictions" settings

    Computer Configuration/Policies/Administrative Templates/Printers/Point and Print Restrictions
    User Configuration/Policies/Administrative Templates/Control Panel/Printers/Point and Print Restrictions


Of these two, the one under Computer Configuration seems to be the important one. But guess what? The original Server 2008 doesn't include this setting in the list -- you need Server 2008 R2 for this setting to show up. If you download the administrative templates from Server 2008 R2, extract, and copy the PolicyDefinitions folder to C:\Windows\sysvol\domain\Policies\PolicyDefinitions, this missing policy will show up magically in Group Policy Management Editor. Of course, the ADMX files from Server 2008 R2 causes Group Policy Management Editor from Server 2008 to complain about parse errors, but it works just fine to click "OK".


Once you've installed the proper ADMX files, for this to work in Windows 7, configure both of these "Point and Print Restrictions" settings to:

    Enabled
    Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt
    Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt


Also, don't forget to make sure the users have permission to install printer drivers, since you're not even going to try to use Admin privileges any more:

    Computer Configuration\Policies\Administrative Templates\System\Driver Installation
    The setting is called "Allow non-administrators to install drivers for these devices setup classes".
    You will need to add the device class GUID of printers:  {4d36e979-e325-11ce-bfc1-08002be10318}



I now applied it at the domain level policy on the computer and user config side and will see if this works.

Reference : http://social.technet.microsoft.com/Forums/en/w7itpronetworking/thread/532e101e-424d-45c8-b984-1adf33d9744d
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34302305
and yet another step.  I am now logged in as the administrator trying to remove all printers and print driver packages and as the domain admin I cannot remove printers, and there are no printers set for the Admin group.
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34303344
I have now made another step.  I am setting it to remove the printer at step 3 and then add it back will see if this works.
0
 
LVL 4

Accepted Solution

by:
CHutchins earned 0 total points
ID: 34370107
For anyone having the issue, this appears to resolve the problem.
Set up a GPP to remove the printer and then set up a GPP to add the printer back. Obviously make sure the order run has the delete first and the add second.  This will also work for driver issues as I am finding.  It will remove the driver package and push the new driver package as far as I can tell as I found another issue with some users on a B&W printer using an older driver for the printer.
0
 
LVL 4

Author Closing Comment

by:CHutchins
ID: 34407449
The Expert Responses were all Initial setup, and the initial setup had already been completed and was working for most users.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question