?
Solved

Print Spooler and GPO

Posted on 2011-10-18
5
Medium Priority
?
479 Views
Last Modified: 2012-06-12
Is that possible to use Windows 2003 GPO to start or stop Print Spooler services depending on the Security Group?

I have a group fo computer mixed with Windows XP and Windows 7 that shared with 4 different security group (Leader, Full Access, BackOffice - Who allow to print), and (NoEmail - who not allow to print).  None of the above Group has local admin rights.

I created a test OU, move the machine to the OU, created a GPO, in User Configuration, I created a bacth file to start the spooler when login and stop a print spooler when logout. and link to the OU.  I change the Print Spooler Services at the PC to manual for start-up.

The problem:
when the system starts-up and login as the NoEmail users,  the Print Spooler started in the manual mode and user unable to change the services.

Any ideas what I did wrong?

Thanks
0
Comment
Question by:Square1
  • 3
  • 2
5 Comments
 
LVL 18

Expert Comment

by:irweazelwallis
ID: 36986241
yes you can
it would be done under machine settings
save me writing it out here is a good guide with screen shots

http://www.jppinto.com/2010/07/creating-a-gpo-to-disable-services-on-windows-servers/
0
 

Author Comment

by:Square1
ID: 36986858
I did this already but this method is not helping.  I need to stop the spooler services when the system power on.  Depending which group of user login to the system and determine if the spooler required to be start.

0
 
LVL 18

Accepted Solution

by:
irweazelwallis earned 2000 total points
ID: 36986943
you could use a WMI filter - but i don't like them very much
or even group policy preferences which can be targeted to a user or group
not in front of a group policy console right now but if you want some more detail on how to do that i can post it up for you
0
 

Author Comment

by:Square1
ID: 36988008
can you please post some example for review?  thanks
0
 
LVL 18

Expert Comment

by:irweazelwallis
ID: 36988147
http://www.grouppolicy.biz/2010/08/how-to-use-group-policy-to-control-services/

this shows you the GPO preferences at the bottom then you would click on the "common tab" and then "item level targeting"

this shows you the item level targeting

http://blogs.technet.com/b/grouppolicy/archive/2009/07/30/security-filtering-wmi-filtering-and-item-level-targeting-in-group-policy-preferences.aspx
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Suggested Courses

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question