Group Policy Change Not Being Applied.
Posted on 2011-03-10
Hello folks, I am having a troublesome issue with some of my client computers. We have a Workstations OU with a GPO linked to it that deploys printers to the computer and enables point and print restrictions for our server. This works fine about 80% of the time. Regardless of who logs on to the computer the same printers are always available, users are unable to delete the printers as they are deployed to the computer and the point and print restrictions enables our users to update the drivers on these printers when we roll out a driver update (our users are not admins on their boxes). Sometimes we need to move these machines into a different OU that does NOT have any deployed printers but retains the point and print restrictions so that users can add and delete printers at will. Again this works fine 80% of the time but some computers don't seem to be getting the new policy even though in event viewer they say group policy processing has completed successfully. GPRESULT lists the new policy like it should (the one where the printers are not deployed) and there is no mention anywhere of the old policy that deployed the printers. But low and behold in Devices and Printers you still see all the old printers that were deployed with the old policy. What's worse is that they can't be deleted (even by a domain admin) because the pc still thinks they are deployed to the computer. gpupdate, gpupdate /force, reboot (a billion times), I can't think of what is going on. I even went as far as removing one of these problem pc's from the domain, renamed it, rejoined it (now it is just in the computers folder), and then moved it directly into the desired OU but the damned printers are STILL there and cannot be deleted. Any ideas? Thanks experts! I should note the print server is Server 2008 x64, the domain controllers are Server 2008R2, and the problem client computers are Windows 7 Enterprise x64.