Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 870
  • Last Modified:

Printer Deployment with Group Policy - Mixed environment between 7x64 and WinXPx64/x86

Greetings fellow IT Pros!

I have a printer deployment question.

First the relevant info:

Print Server = Win2k3 x86 (Not R2)

Pri DC = Win2k8 x64

Client machines = Mixed environment with win 7 x64 and Win XP x64/x86 (Group Policy Preference client side extensions installed)

Printers are configured using a machine based group policy objects.
I was under the impression that if I did it this way, users would not be prompted to install drivers.  However, this is not the case - users are being prompted, and the ones who are not local admins cannot update drivers, or install printers when and if they change.

Here is my question - I know there is a GPO setting that will allow users to install printer drivers - do I need to use this if I am installing printers with a machine based GPO?  Why?

And, if not - what have I done wrong?

The setting I was going to enable is:

Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Devices: Prevent users from installing printer drivers - Disabled

And, do I need to use any of these as well?

Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\User Account Control: Detect application installations and prompt for elevation - Disabled

Computer Configuration\Policies\Administrative Templates\System\Driver Installation\Allow non-administrators to install drivers for these device setup classes - Enabled

 
Allowed device setup class GUIDs:

{4d36e979-e325-11ce-bfc1-08002be10318}

{4658ee7e-f050-11d1-b6bd-00c04fa372a7}


Thank you in advance!
0
cschmidt5
Asked:
cschmidt5
  • 2
1 Solution
 
David_IngledewCommented:
Give these a go - Use them on Citrix, but assume same for Std GPO.

Computer Configuration > Policies > Adminstrative Templates > Printers > Point and Print Restrictions

> Change it to Enabled
> Change the following settings:

Users can only point and print to these servers > Unticked (Disabled)
When installing drivers for a new connection > Do not show warning or elevation prompt
When updating drivers for an existing connection > Do not show warning or elevation prompt
0
 
cschmidt5Author Commented:
:) I just found that on:

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/67e34b3c-8e53-4a38-9e99-92c3dd53e38a/

Thanks, I am testing now :)

I realized when I saw that; it is totally applicable to my system.
0
 
cschmidt5Author Commented:
Thanks!
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now