Solved

GPO not applying to users

Posted on 2013-01-08
6
218 Views
Last Modified: 2013-01-27
I am new to Windows Server, and I've been trying to apply GPOs to OUs with no avail. There are plenty of things I'm trying to do, but here is an example of something small that I can't get to work.

I have an OU with all PCs and an OU with all users. I have this rule applied to PCs
Devices: Prevent users from installing printer drivers: Disabled  (see attached pic)

Open in new window

After applying any rule I do a gpupdate /force, log the user out, and reboot the PC. No luck.

Any ideas? Thanks in advance!
Screen-Shot-2013-01-08-at-7.08.4.png
0
Comment
Question by:AACITADMIN
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 1

Expert Comment

by:NisheshPrasad
ID: 38757627
Hi

Can you clarify your question a little bit ?

The Policy setting that you've defined for the printer driver is 'disabled' by default. Therefore what exactly are you trying to achieve ? Are you trying to enable that policy in a GPO but the Computer is failing to apply it ?

Where in the GPO did you enable that policy ? Was it in the User Configuration section or the Computer Configuration Section of the GPO ?

Can you try something simpler - like setting a static wallpaper setting within a GPO and see if that works ? The reason i'm asking you to do this is because this configuration setting exists solely within the User Configuration section of a GPO and would clear any doubts on loopback processing being the culprit.

Let me know if any of this helps.
0
 
LVL 3

Expert Comment

by:Dhanukadam
ID: 38757750
0
 
LVL 21

Expert Comment

by:RK
ID: 38757792
Hi,

I understand that this policy is not applying for the computers which is located in the specific OU? have you performed a rsop.msc on an affected computers?

Prevent users from installing printer drivers- currently it's set as disabled - This means that the users will be able to install the drivers?
0
Guide to Performance: Optimization & Monitoring

Nowadays, monitoring is a mixture of tools, systems, and codes—making it a very complex process. And with this complexity, comes variables for failure. Get DZone’s new Guide to Performance to learn how to proactively find these variables and solve them before a disruption occurs.

 

Author Comment

by:AACITADMIN
ID: 38757797
Yes, I would like users within my domain to be able to install printer drivers. I am not familiar with rsop.msc What does it do?
0
 
LVL 1

Accepted Solution

by:
NisheshPrasad earned 500 total points
ID: 38757840
Hi

The Configuration "Devices: Prevent Users from installing printer drivers" is a GPO setting that would normally be configured in the Computer Section of a GPO and assigned to a USER. Therefore - try removing the GPO from the DH_Computers OU and assign to the DH_Users OU. Run a Gpupdate if the results are not instant.

If you are assigning it to the DH_Computers OU, loopback processing may be preventing it from being applied to the "User Accounts".

BTW - RSOP is Resultant Set of Policy. Can be accessed via an MMC. It shows you what GPOs are eventually applied to a User or a Computer account.

Let me know if it helps.
0
 

Author Closing Comment

by:AACITADMIN
ID: 38824533
This worked, thanks for your help!
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question