Basically, we have just upgraded to a mixed mode environment of Active Directory with both Server 2008 and 2003 domain controllers. In our AD, we have Organizational Units with workstations in our computer labs. Each lab has specific printers in that lab. What we would like to do is apply a GPO that maps the printers in that lab to the user as they log into a workstation in that lab. We do not want to limit the user from adding an additional network printer if they so choose, but we want to limit the user from sending printouts to classroom printers while classes are going on.
The labs and printers basically do not change at all; however, the users are students who could log into machines throughout our buildings. In the past, we used a logon.vbs script to map all the printers a user might have access to no matter what machine the user logged into. Hence, we had people in the labs sending 200 page printouts to a classroom printer in the middle of a professor's lecture and interrupting the class.
Can we have a policy for the lab OU that says that when a user logs into any machine in that OU that the specific printers for that lab are mapped for that user?