Solved

GPO not applying to users

Posted on 2013-01-08
6
216 Views
Last Modified: 2013-01-27
I am new to Windows Server, and I've been trying to apply GPOs to OUs with no avail. There are plenty of things I'm trying to do, but here is an example of something small that I can't get to work.

I have an OU with all PCs and an OU with all users. I have this rule applied to PCs
Devices: Prevent users from installing printer drivers: Disabled  (see attached pic)

Open in new window

After applying any rule I do a gpupdate /force, log the user out, and reboot the PC. No luck.

Any ideas? Thanks in advance!
Screen-Shot-2013-01-08-at-7.08.4.png
0
Comment
Question by:AACITADMIN
6 Comments
 
LVL 1

Expert Comment

by:NisheshPrasad
ID: 38757627
Hi

Can you clarify your question a little bit ?

The Policy setting that you've defined for the printer driver is 'disabled' by default. Therefore what exactly are you trying to achieve ? Are you trying to enable that policy in a GPO but the Computer is failing to apply it ?

Where in the GPO did you enable that policy ? Was it in the User Configuration section or the Computer Configuration Section of the GPO ?

Can you try something simpler - like setting a static wallpaper setting within a GPO and see if that works ? The reason i'm asking you to do this is because this configuration setting exists solely within the User Configuration section of a GPO and would clear any doubts on loopback processing being the culprit.

Let me know if any of this helps.
0
 
LVL 3

Expert Comment

by:Dhanukadam
ID: 38757750
0
 
LVL 21

Expert Comment

by:RK
ID: 38757792
Hi,

I understand that this policy is not applying for the computers which is located in the specific OU? have you performed a rsop.msc on an affected computers?

Prevent users from installing printer drivers- currently it's set as disabled - This means that the users will be able to install the drivers?
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:AACITADMIN
ID: 38757797
Yes, I would like users within my domain to be able to install printer drivers. I am not familiar with rsop.msc What does it do?
0
 
LVL 1

Accepted Solution

by:
NisheshPrasad earned 500 total points
ID: 38757840
Hi

The Configuration "Devices: Prevent Users from installing printer drivers" is a GPO setting that would normally be configured in the Computer Section of a GPO and assigned to a USER. Therefore - try removing the GPO from the DH_Computers OU and assign to the DH_Users OU. Run a Gpupdate if the results are not instant.

If you are assigning it to the DH_Computers OU, loopback processing may be preventing it from being applied to the "User Accounts".

BTW - RSOP is Resultant Set of Policy. Can be accessed via an MMC. It shows you what GPOs are eventually applied to a User or a Computer account.

Let me know if it helps.
0
 

Author Closing Comment

by:AACITADMIN
ID: 38824533
This worked, thanks for your help!
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

825 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question