Solved

Windows 7 GP 2008 Printer Deployment

Posted on 2010-11-30
11
1,140 Views
Last Modified: 2012-08-13
I have a user with a win 7 64 Pro virtual machine that will randomly drop one of our printers.  
All other printers deploy correctly to all machines.

When this printer is lost it seems to lose the driver completely.  I try to install manually from the server and it asks id I would like to install the driver, it starts then install then fails with access denied.

The printer is deployed  him and it is added to him in GPP.  I have also set it up for quiet installation ( I forget the name of the actual GP setting)

I am at a loss as this is the only one with the issue and it happens to be the color printer.

We have multiple Win 7 64 virtual machine and multiple win 7 32 desktops as well as XP machines that have no issues with the installation.
0
Comment
Question by:CHutchins
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 9
11 Comments
 
LVL 4

Expert Comment

by:tausifsfarid
ID: 34242543
Hi,

Please refer to the below link: http://technet.microsoft.com/en-us/library/cc731292.aspx
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34242584
umm Yeah I am well past that.
as I said multiple printers work, including this one on all other machines.  in fact I believe that is the technote I used in setting up the GPP.
0
 
LVL 4

Expert Comment

by:kabix
ID: 34244850
Seems like it could be a permission issue. There should be an issue when installing manually. Files could be on the machine but have no registry permissions or other way around.
0
Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

 
LVL 4

Author Comment

by:CHutchins
ID: 34247994
I thought the same thing, but went in and the permissions on the printer are correct, and I elevated the user to a local admin for testing and had the same issue.  The issue is definitely something with what GPP does with the printers from what I can see.

But to my understanding setting up the Config to allow the silent install should resolve this issue, but to further it I have raised users to power users on the computers as well which should be enough to install printers.

And like I said this only happens to him not other users and multiple users are set up identically.
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34285014
The issue is still occurring for this one user no matter how I change the policy.  It works for everyone else, but this user it does not work for.  I even went as far as changing him to a different OU which I have tested and I know is working and has the same issue.

I cannot install the printer and it should be able to.  My only thought is maybe the driver is going to have to be installed as an admin, but I elevated him to local admin and had the same issue.  Ay other ideas out there?
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34286624
I guess the question is what permissions am I missing?  They have permissions to the printer and they have power user permission, I don't see anything else, and I am now seeing the issue randomly about the network.
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34286899
I just found this
There are TWO "Point and Print Restrictions" settings

    Computer Configuration/Policies/Administrative Templates/Printers/Point and Print Restrictions
    User Configuration/Policies/Administrative Templates/Control Panel/Printers/Point and Print Restrictions


Of these two, the one under Computer Configuration seems to be the important one. But guess what? The original Server 2008 doesn't include this setting in the list -- you need Server 2008 R2 for this setting to show up. If you download the administrative templates from Server 2008 R2, extract, and copy the PolicyDefinitions folder to C:\Windows\sysvol\domain\Policies\PolicyDefinitions, this missing policy will show up magically in Group Policy Management Editor. Of course, the ADMX files from Server 2008 R2 causes Group Policy Management Editor from Server 2008 to complain about parse errors, but it works just fine to click "OK".


Once you've installed the proper ADMX files, for this to work in Windows 7, configure both of these "Point and Print Restrictions" settings to:

    Enabled
    Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt
    Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt


Also, don't forget to make sure the users have permission to install printer drivers, since you're not even going to try to use Admin privileges any more:

    Computer Configuration\Policies\Administrative Templates\System\Driver Installation
    The setting is called "Allow non-administrators to install drivers for these devices setup classes".
    You will need to add the device class GUID of printers:  {4d36e979-e325-11ce-bfc1-08002be10318}



I now applied it at the domain level policy on the computer and user config side and will see if this works.

Reference : http://social.technet.microsoft.com/Forums/en/w7itpronetworking/thread/532e101e-424d-45c8-b984-1adf33d9744d
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34302305
and yet another step.  I am now logged in as the administrator trying to remove all printers and print driver packages and as the domain admin I cannot remove printers, and there are no printers set for the Admin group.
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34303344
I have now made another step.  I am setting it to remove the printer at step 3 and then add it back will see if this works.
0
 
LVL 4

Accepted Solution

by:
CHutchins earned 0 total points
ID: 34370107
For anyone having the issue, this appears to resolve the problem.
Set up a GPP to remove the printer and then set up a GPP to add the printer back. Obviously make sure the order run has the delete first and the add second.  This will also work for driver issues as I am finding.  It will remove the driver package and push the new driver package as far as I can tell as I found another issue with some users on a B&W printer using an older driver for the printer.
0
 
LVL 4

Author Closing Comment

by:CHutchins
ID: 34407449
The Expert Responses were all Initial setup, and the initial setup had already been completed and was working for most users.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question