?
Solved

Windows 7 GP 2008 Printer Deployment

Posted on 2010-11-30
11
Medium Priority
?
1,142 Views
Last Modified: 2012-08-13
I have a user with a win 7 64 Pro virtual machine that will randomly drop one of our printers.  
All other printers deploy correctly to all machines.

When this printer is lost it seems to lose the driver completely.  I try to install manually from the server and it asks id I would like to install the driver, it starts then install then fails with access denied.

The printer is deployed  him and it is added to him in GPP.  I have also set it up for quiet installation ( I forget the name of the actual GP setting)

I am at a loss as this is the only one with the issue and it happens to be the color printer.

We have multiple Win 7 64 virtual machine and multiple win 7 32 desktops as well as XP machines that have no issues with the installation.
0
Comment
Question by:CHutchins
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 9
11 Comments
 
LVL 4

Expert Comment

by:tausifsfarid
ID: 34242543
Hi,

Please refer to the below link: http://technet.microsoft.com/en-us/library/cc731292.aspx
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34242584
umm Yeah I am well past that.
as I said multiple printers work, including this one on all other machines.  in fact I believe that is the technote I used in setting up the GPP.
0
 
LVL 4

Expert Comment

by:kabix
ID: 34244850
Seems like it could be a permission issue. There should be an issue when installing manually. Files could be on the machine but have no registry permissions or other way around.
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 4

Author Comment

by:CHutchins
ID: 34247994
I thought the same thing, but went in and the permissions on the printer are correct, and I elevated the user to a local admin for testing and had the same issue.  The issue is definitely something with what GPP does with the printers from what I can see.

But to my understanding setting up the Config to allow the silent install should resolve this issue, but to further it I have raised users to power users on the computers as well which should be enough to install printers.

And like I said this only happens to him not other users and multiple users are set up identically.
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34285014
The issue is still occurring for this one user no matter how I change the policy.  It works for everyone else, but this user it does not work for.  I even went as far as changing him to a different OU which I have tested and I know is working and has the same issue.

I cannot install the printer and it should be able to.  My only thought is maybe the driver is going to have to be installed as an admin, but I elevated him to local admin and had the same issue.  Ay other ideas out there?
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34286624
I guess the question is what permissions am I missing?  They have permissions to the printer and they have power user permission, I don't see anything else, and I am now seeing the issue randomly about the network.
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34286899
I just found this
There are TWO "Point and Print Restrictions" settings

    Computer Configuration/Policies/Administrative Templates/Printers/Point and Print Restrictions
    User Configuration/Policies/Administrative Templates/Control Panel/Printers/Point and Print Restrictions


Of these two, the one under Computer Configuration seems to be the important one. But guess what? The original Server 2008 doesn't include this setting in the list -- you need Server 2008 R2 for this setting to show up. If you download the administrative templates from Server 2008 R2, extract, and copy the PolicyDefinitions folder to C:\Windows\sysvol\domain\Policies\PolicyDefinitions, this missing policy will show up magically in Group Policy Management Editor. Of course, the ADMX files from Server 2008 R2 causes Group Policy Management Editor from Server 2008 to complain about parse errors, but it works just fine to click "OK".


Once you've installed the proper ADMX files, for this to work in Windows 7, configure both of these "Point and Print Restrictions" settings to:

    Enabled
    Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt
    Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt


Also, don't forget to make sure the users have permission to install printer drivers, since you're not even going to try to use Admin privileges any more:

    Computer Configuration\Policies\Administrative Templates\System\Driver Installation
    The setting is called "Allow non-administrators to install drivers for these devices setup classes".
    You will need to add the device class GUID of printers:  {4d36e979-e325-11ce-bfc1-08002be10318}



I now applied it at the domain level policy on the computer and user config side and will see if this works.

Reference : http://social.technet.microsoft.com/Forums/en/w7itpronetworking/thread/532e101e-424d-45c8-b984-1adf33d9744d
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34302305
and yet another step.  I am now logged in as the administrator trying to remove all printers and print driver packages and as the domain admin I cannot remove printers, and there are no printers set for the Admin group.
0
 
LVL 4

Author Comment

by:CHutchins
ID: 34303344
I have now made another step.  I am setting it to remove the printer at step 3 and then add it back will see if this works.
0
 
LVL 4

Accepted Solution

by:
CHutchins earned 0 total points
ID: 34370107
For anyone having the issue, this appears to resolve the problem.
Set up a GPP to remove the printer and then set up a GPP to add the printer back. Obviously make sure the order run has the delete first and the add second.  This will also work for driver issues as I am finding.  It will remove the driver package and push the new driver package as far as I can tell as I found another issue with some users on a B&W printer using an older driver for the printer.
0
 
LVL 4

Author Closing Comment

by:CHutchins
ID: 34407449
The Expert Responses were all Initial setup, and the initial setup had already been completed and was working for most users.
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.
Suggested Courses
Course of the Month14 days, 11 hours left to enroll

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question