Solved

Connect to Printer: A policy is in effect on your computer which prevents you from connecting to this print queue..

Posted on 2015-02-20
17
6,216 Views
Last Modified: 2015-04-02
I've attempted to define the" Load and unload device drivers" in GPME under Computer Configuration/Policies/Windows Settings/Local Policies/User Rights Assignment on my DC  as well as disabling the "Disallow installation of printers using kernel-mode drivers" & "Point and Print Restrictions" under Computer Configuration/Policies/Administrative Templates/Printers but still receive the titled error message. This is a USB shared printer on a workstation which the user wants to share to her neighbor. I've replicated this error when I shred my local printer in my office and attempted to attach to a spare computer and received the same error message which leads me to believe it's on the server end and not the local computer end. Any ideas beyond what was stated above would be greatly appreciated.

I've also tried the below:
User Configuration\Administrative Templates\Control Panel\Printers\

Point and Print Restrictions >>
Disable
Prevent addition of printers
>> Disable
Prevent deletion of printers
>>
Disable


Local Computer Policies\Administrative Templates\Printers\

Allow print spooler to accept client connections
>> Enable
Printer-Error.png
0
Comment
Question by:StosSpiro
  • 9
  • 8
17 Comments
 
LVL 24

Expert Comment

by:lionelmm
ID: 40622915
There may be some setting that you have set that you are unaware of I suggest you run gpresult; check out this link for 2 ways to do it http://www.howtogeek.com/116184/how-to-see-which-group-policies-are-applied-to-your-pc-and-user-account/
0
 

Author Comment

by:StosSpiro
ID: 40644499
I ran the rsop.msc and see the following print screens. The settings are proper for the printing; in my mind. Is there somewhere else that I'm not looking? Registry?-Even though I do not want to touch it on a server, especially a DC. Again, this is only occurring when I share a USB connected printer from a local PC and trying to connect it to that person's neighbor. It shows under shared printers fine during the printer wizard. This is certainly a network wide issue as I tested it with my own local printer (different model) and received the same policy error.
ComputerConfigurationAdministrativeTempl
UserConfigurationAdministrativeTemplates
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 40644717
are all the systems part of the domain--the same domain? Are all users logged on authenticated users of the same domain? Did you check the permissions on the USB shared printer? Can you give one of these users domain admin rights and see if that resolves the issue (that way we can see if it is a "user rights" or maybe a permissions issue))?
0
 

Author Comment

by:StosSpiro
ID: 40644762
All computers are part of the domain and its only one domain. All users are AD users logging in. My own account has the same rights as the administrator account. I've got a local HP LJ 2420 printer that I've shared from my workstation; I see it under the shared printers list when I open up the add printer wizard where I receive the error message. I also get the same error when I manually enter in the unc path to the printer both times on a spare laptop in my office using the administrator credentials. This has to be something with GP. This DC was put in place just a year ago. The outsourced IT guy who built this infrastructure told the user that this feature was not possible but when I came on board a month ago, I told her otherwise.
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 40645089
OK so if domain admins are also getting this error then it is more then likely not a permissions issue but that could still mean it is a user rights issue. (I did not see anything in the GPO but it could be -- can you run gpresult /v >gpresult.txt from a command prompt and then post that text file). Check out this link and see what it says--I know it is not the same OS but sometimes this helps to guide one to the right place. If these servers or PCs were upgraded (not clean installs) then this may even be more relevant http://support.microsoft.com/kb/888046
0
 

Author Comment

by:StosSpiro
ID: 40645104
Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
c 2013 Microsoft Corporation. All rights reserved.

Created on 3/4/2015 at 1:22:24 PM



RSOP data for AMEC\administrator on DC01 : Logging Mode
--------------------------------------------------------

OS Configuration:            Additional/Backup Domain Controller
OS Version:                  6.3.9600
Site Name:                   145MAIN
Roaming Profile:             N/A
Local Profile:               C:\Users\administrator.AMEC
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=DC01,OU=Domain Controllers,DC=amec,DC=local
    Last time Group Policy was applied: 3/4/2015 at 1:17:57 PM
    Group Policy was applied from:      DC01.amec.local
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        AMEC
    Domain Type:                        Windows 2008 or later

    Applied Group Policy Objects
    -----------------------------
        Default Domain Controllers Policy
        Default Domain Policy
        Local Admin Priv

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups
    -------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        BUILTIN\Users
        Certificate Service DCOM Access
        BUILTIN\Pre-Windows 2000 Compatible Access
        Windows Authorization Access Group
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        This Organization
        DC01$
        Domain Controllers
        NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
        Authentication authority asserted identity
        Denied RODC Password Replication Group
        Cert Publishers
        System Mandatory Level
       
    Resultant Set Of Policies for Computer
    ---------------------------------------

        Software Installations
        ----------------------
            N/A

        Startup Scripts
        ---------------
            N/A

        Shutdown Scripts
        ----------------
            N/A

        Account Policies
        ----------------
            GPO: Default Domain Policy
                Policy:            MaxRenewAge
                Computer Setting:  7

            GPO: Default Domain Policy
                Policy:            MaxServiceAge
                Computer Setting:  600

            GPO: Default Domain Policy
                Policy:            MaxClockSkew
                Computer Setting:  5

            GPO: Default Domain Policy
                Policy:            MaxTicketAge
                Computer Setting:  10

        Audit Policy
        ------------
            N/A

        User Rights
        -----------
            GPO: Default Domain Controllers Policy
                Policy:            MachineAccountPrivilege
                Computer Setting:  Authenticated Users
                                   
            GPO: Default Domain Controllers Policy
                Policy:            ChangeNotifyPrivilege
                Computer Setting:  *S-1-5-80-780408392-3003630426-4078034421-851345807-2299343754
                                   *S-1-5-80-694290396-776914732-4128507809-3437626335-4292765611
                                   *S-1-5-80-2789302588-1006792399-4057841430-4256163697-2647757656
                                   *S-1-5-80-234502384-295464551-818201678-4197364421-546322662
                                   Pre-Windows 2000 Compatible Access
                                   Administrators
                                   AMEC\QBDataServiceUser23
                                   AMEC\QBDataServiceUser17
                                   NETWORK SERVICE
                                   LOCAL SERVICE
                                   Authenticated Users
                                   Everyone
                                   
            GPO: Default Domain Controllers Policy
                Policy:            IncreaseBasePriorityPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            TakeOwnershipPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            RestorePrivilege
                Computer Setting:  Backup Operators
                                   Server Operators
                                   Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            DebugPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            SystemTimePrivilege
                Computer Setting:  *S-1-5-80-1644962145-3725076467-2175993199-4005059230-3516689904
                                   Server Operators
                                   Administrators
                                   LOCAL SERVICE
                                   
            GPO: Default Domain Controllers Policy
                Policy:            SecurityPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            ShutdownPrivilege
                Computer Setting:  Backup Operators
                                   Print Operators
                                   Server Operators
                                   Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            AuditPrivilege
                Computer Setting:  IIS APPPOOL\RootApp
                                   IIS APPPOOL\DefaultAppPool
                                   *S-1-5-82-1036420768-1044797643-1061213386-2937092688-4282445334
                                   NETWORK SERVICE
                                   LOCAL SERVICE
                                   
            GPO: Default Domain Controllers Policy
                Policy:            InteractiveLogonRight
                Computer Setting:  ENTERPRISE DOMAIN CONTROLLERS
                                   Backup Operators
                                   Print Operators
                                   Server Operators
                                   Account Operators
                                   Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            CreatePagefilePrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            BatchLogonRight
                Computer Setting:  IIS_IUSRS
                                   Performance Log Users
                                   Backup Operators
                                   Administrators
                                   *S-1-5-21-1404765112-731494500-239889500-1313
                                   
            GPO: Default Domain Controllers Policy
                Policy:            NetworkLogonRight
                Computer Setting:  ENTERPRISE DOMAIN CONTROLLERS
                                   Pre-Windows 2000 Compatible Access
                                   Administrators
                                   AMEC\QBDataServiceUser23
                                   AMEC\QBDataServiceUser17
                                   Authenticated Users
                                   Everyone
                                   
            GPO: Default Domain Controllers Policy
                Policy:            SystemProfilePrivilege
                Computer Setting:  NT SERVICE\WdiServiceHost
                                   Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            RemoteShutdownPrivilege
                Computer Setting:  Server Operators
                                   Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            BackupPrivilege
                Computer Setting:  Backup Operators
                                   Server Operators
                                   Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            EnableDelegationPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            UndockPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            SystemEnvironmentPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            LoadDriverPrivilege
                Computer Setting:  Print Operators
                                   Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            IncreaseQuotaPrivilege
                Computer Setting:  IIS APPPOOL\RootApp
                                   IIS APPPOOL\DefaultAppPool
                                   *S-1-5-82-1036420768-1044797643-1061213386-2937092688-4282445334
                                   *S-1-5-80-780408392-3003630426-4078034421-851345807-2299343754
                                   *S-1-5-80-694290396-776914732-4128507809-3437626335-4292765611
                                   *S-1-5-80-2789302588-1006792399-4057841430-4256163697-2647757656
                                   *S-1-5-80-234502384-295464551-818201678-4197364421-546322662
                                   Administrators
                                   AMEC\spwebapp
                                   AMEC\spfarm
                                   NETWORK SERVICE
                                   LOCAL SERVICE
                                   
            GPO: Default Domain Controllers Policy
                Policy:            ProfileSingleProcessPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            AssignPrimaryTokenPrivilege
                Computer Setting:  IIS APPPOOL\RootApp
                                   IIS APPPOOL\DefaultAppPool
                                   *S-1-5-82-1036420768-1044797643-1061213386-2937092688-4282445334
                                   *S-1-5-80-780408392-3003630426-4078034421-851345807-2299343754
                                   *S-1-5-80-694290396-776914732-4128507809-3437626335-4292765611
                                   *S-1-5-80-2789302588-1006792399-4057841430-4256163697-2647757656
                                   *S-1-5-80-234502384-295464551-818201678-4197364421-546322662
                                   AMEC\spwebapp
                                   AMEC\spfarm
                                   NETWORK SERVICE
                                   LOCAL SERVICE
                                   
        Security Options
        ----------------
            GPO: Default Domain Policy
                Policy:            LSAAnonymousNameLookup
                Computer Setting:  Not Enabled

            GPO: Default Domain Policy
                Policy:            TicketValidateClient
                Computer Setting:  Enabled

            GPO: Default Domain Controllers Policy
                Policy:            @wsecedit.dll,-59013
                ValueName:         MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\LDAPServerIntegrity
                Computer Setting:  1

            GPO: Default Domain Controllers Policy
                Policy:            @wsecedit.dll,-59043
                ValueName:         MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSecuritySignature
                Computer Setting:  1

            GPO: Default Domain Controllers Policy
                Policy:            @wsecedit.dll,-59044
                ValueName:         MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature
                Computer Setting:  1

            GPO: Default Domain Policy
                Policy:            @wsecedit.dll,-59058
                ValueName:         MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash
                Computer Setting:  1

            GPO: Default Domain Controllers Policy
                Policy:            @wsecedit.dll,-59018
                ValueName:         MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrSeal
                Computer Setting:  1

            GPO: Local Admin Priv
                Policy:            @appinfo.dll,-203
                ValueName:         MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA
                Computer Setting:  1

            N/A

        Event Log Settings
        ------------------
            N/A

        Restricted Groups
        -----------------
            GPO: Local Admin Priv
                Groupname: AMEC\IT_Support
                Members:   N/A
                           
            GPO: Local Admin Priv
                Groupname: AMEC\Field_Support
                Members:   N/A
                           
        System Services
        ---------------
            N/A

        Registry Settings
        -----------------
            N/A

        File System Settings
        --------------------
            N/A

        Public Key Policies
        -------------------
            N/A

        Administrative Templates
        ------------------------
            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PublishPrinters
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Admin Priv
                Folder Id: Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\DefaultLevel
                Value:       0, 0, 4, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\Wizard\Auto Publishing
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Local Admin Priv
                Folder Id: Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{d2c34ab2-529a-46b2-b293-fc853fce72ea}\SaferFlags
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\InForest
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Local Admin Priv
                Folder Id: Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{d2c34ab2-529a-46b2-b293-fc853fce72ea}\Description
                Value:       0, 0
                State:       Enabled

            GPO: Local Admin Priv
                Folder Id: Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{191cd7fa-f240-4a17-8986-94d480a6c8ca}\Description
                Value:       0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\TrustedServers
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\RegisterSpoolerRemoteRpcEndPoint
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\NoWarningNoElevationOnInstall
                State:       disabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\UpdatePromptSettings
                State:       disabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\ListofServers\dc01.amec.local
                Value:       100, 0, 99, 0, 48, 0, 49, 0, 46, 0, 97, 0, 109, 0, 101, 0, 99, 0, 46, 0, 108, 0, 111, 0, 99, 0, 97, 0, 108, 0, 0, 0
                State:       Enabled

            GPO: Local Admin Priv
                Folder Id: Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\TransparentEnabled
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Admin Priv
                Folder Id: Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\PolicyScope
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\PackagePointAndPrintServerList
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\ServerList
                State:       disabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\Restricted
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\PackagePointAndPrintOnly
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Admin Priv
                Folder Id: Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{191cd7fa-f240-4a17-8986-94d480a6c8ca}\SaferFlags
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Local Admin Priv
                Folder Id: Software\Policies\Microsoft\Windows\Installer\AllowLockdownPatch
                Value:       1, 0, 0, 0
                State:       Enabled


USER SETTINGS
--------------
    CN=Administrator,CN=Users,DC=amec,DC=local
    Last time Group Policy was applied: 3/4/2015 at 1:05:07 PM
    Group Policy was applied from:      DC01.amec.local
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        AMEC
    Domain Type:                        Windows 2008 or later
   
    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups
    ---------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Administrators
        Print Operators
        BUILTIN\Users
        Remote Desktop Users
        BUILTIN\Pre-Windows 2000 Compatible Access
        Certificate Service DCOM Access
        REMOTE INTERACTIVE LOGON
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Domain Admins
        Admin
        Group Policy Creator Owners
        Enterprise Admins
        Schema Admins
        Authentication authority asserted identity
        DnsAdmins
        Scan Operators
        DHCP Administrators
        WSS_ADMIN_WPG
        Denied RODC Password Replication Group
        HelpLibraryUpdaters
        High Mandatory Level
       
    The user has the following security privileges
    ----------------------------------------------

        Bypass traverse checking
        Manage auditing and security log
        Back up files and directories
        Restore files and directories
        Change the system time
        Shut down the system
        Force shutdown from a remote system
        Take ownership of files or other objects
        Debug programs
        Modify firmware environment values
        Profile system performance
        Profile single process
        Increase scheduling priority
        Load and unload device drivers
        Create a pagefile
        Adjust memory quotas for a process
        Remove computer from docking station
        Perform volume maintenance tasks
        Impersonate a client after authentication
        Create global objects
        Change the time zone
        Create symbolic links
        Enable computer and user accounts to be trusted for delegation
        Increase a process working set
        Add workstations to domain

    Resultant Set Of Policies for User
    -----------------------------------

        Software Installations
        ----------------------
            N/A

        Logon Scripts
        -------------
            N/A

        Logoff Scripts
        --------------
            N/A

        Public Key Policies
        -------------------
            N/A

        Administrative Templates
        ------------------------
            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\NoWarningNoElevationOnInstall
                State:       disabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\ServerList
                State:       disabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\PackagePointAndPrintServerList
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\InForest
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\UpdatePromptSettings
                State:       disabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\Wizard\Downlevel Browse
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\PackagePointAndPrintOnly
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\Wizard\Printers Page URL
                Value:       92, 0, 92, 0, 100, 0, 99, 0, 48, 0, 49, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\TrustedServers
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\ListofServers\dc01.amec.local
                Value:       100, 0, 99, 0, 48, 0, 49, 0, 46, 0, 97, 0, 109, 0, 101, 0, 99, 0, 46, 0, 108, 0, 111, 0, 99, 0, 97, 0, 108, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\Restricted
                Value:       0, 0, 0, 0
                State:       Enabled

        Folder Redirection
        ------------------
            N/A

        Internet Explorer Browser User Interface
        ----------------------------------------
            N/A

        Internet Explorer Connection
        ----------------------------
            N/A

        Internet Explorer URLs
        ----------------------
            N/A

        Internet Explorer Security
        --------------------------
            N/A

        Internet Explorer Programs
        --------------------------
            N/A
0
 

Author Comment

by:StosSpiro
ID: 40645108
Yup, already saw that Microsoft KB article prior to posting here.
0
 
LVL 24

Accepted Solution

by:
lionelmm earned 500 total points
ID: 40645488
GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\ServerList
                State:       disabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\Restricted
                Value:       0, 0, 0, 0
                State:       Enabled

GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\ServerList
                State:       disabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\PackagePointAndPrintServerList
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\InForest
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Default Domain Policy
                Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\UpdatePromptSettings
                State:       disabled
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:StosSpiro
ID: 40645546
So am I reverting all these states?
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 40645594
Sorry -- it seems all my comments were not added--I made comments for each section--basically I was suggesting you set these to its opposite (if enabled now disable; if disable enable). Keep in mind each time you make a change test it by running gpupdate /force AND then rebooting if possible (some setting will not take affect until you reboot and I don't know these well enough to know if that applies to them).
0
 

Author Comment

by:StosSpiro
ID: 40645638
I'll do the gpupdate /force and do a reboot tonight and test tomorrow. Will let you know. Thxs!
0
 

Author Comment

by:StosSpiro
ID: 40645735
Ok, so I was about to start this venture and became hesitant. I didn't say I have two DCs. A master and a slave. I noticed that when I was about to make changes that the GPO window title showed the attached print screen. While in DC01 and navigating to the GPO, I noticed editing the Default Domain Policy, the header shows [DC02.AMEC.LOCAL] Policy. When remoteing into DC02 and going to the same section, it also shows {DC02.AMEC.LOCAL]. DC01 is the master and DC02 is the slave. When I navigate to the "change domain controller" section in DC01, it tells me current domain controller is DC02. See attached print screen. Again, I inherited this about a month ago. Do I need to change this before I make change in the GPO? Also, I can't seem to find the folder ids within the edit section of the default domain policy for me to revert these changes.
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 40645871
I would make all the changes to dc01 and it should update dc02 (assuming everything is working properly).
0
 

Author Comment

by:StosSpiro
ID: 40646628
I forgot to upload the print screens I think.
DC-print-screen.PNG
Domain-Controller-Settings.PNG
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 40646738
nltest /dcname:your-domain-name
this will tell which is the PDC
0
 

Author Comment

by:StosSpiro
ID: 40675444
Hey Lionelmm, I have not been able to get around to this until recently. The GPO's that you suggested I revert, I can not find these exact paths, i.e., Folder Id: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\ServerList when navigating to Group Policy Management, Default Domain Controllers. Can you provide exact instruction on how to get to this area?
0
 
LVL 24

Expert Comment

by:lionelmm
ID: 40675528
I am sorry I can't get to this right now. After all this time I have forgotten what we were working on and I just can't re-read it all again. I understand that stuff and life get in the way but I will have to get back to you later on. You may want to request attention if you want immediate help as I can't do it right now. You can use filters or search to find the policies
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

When I recently replaced my image transfer kit on my office HP color laserjet 5550dn printer, I had a slight problem.  The left bracket that holds the transfer kit got stuck in the upright locked position instead of being at a 45 degree angle facing…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now