Best Practices for Setting Default Printers via GPP

In our school district, our Students need to print in each of the classrooms or labs they are in throughout the day, but we only want them to have the option to print to the printer located in the classroom or lab they are in.  I have been successful in deploying printers via Print Management or Computer Configuration GPP, but I have NOT been able to set these printers as the Default printer.

I believe the issue is that the Students are in one OU, and the Computers are in another.  I have configured the policy at the Computer OU, which deploys the printer as needed.  The User Configuration of the policy is ignored since the Students are in a different OU.  I have tried Linking the policy to the Students OU, but this delivers all printers per policy to the students, and we end up with abandoned print jobs and wasted paper.

I need Expert assistance in getting this working properly, setting the Default printer per Student as they login to PC's/Laptops in various different Computer OU's.
randaldstowellNetwork EngineerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
In order to accomplish this you need to use LoopBack Policy Processing. This allow you to set User Policies and have them apply to computers that have Loopback processing enabled. Because you have different Printers for Each Class room what you are going need to do is below...
- create one security Group for each classroom
- add all of the computer objects from each room to their respective security group that you create
- create one GPO for each Classrom (all computers can be in the same OU)
- Enable Loopbackprocessing (merge mode) on all of the GPO's that you created
- Set the security filtering on each GPO to the respective Security Groups you created in step 1 (1 security group for each GPO)
- Link all of the GPO's to the OU where the computer objects reside

When all of that is completed when a user logs into the machine they will automatically get the new printer based on whatever class room computer they login to.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.