Prevent GPP for Printer Deployment applying to servers

I've successfully set up a GPP to deploy a number of printers to users based on ILT (User OU membership) and allowed normal (non-admin) users to install print drivers via Computer configurations (Point & Print) in the same GPP.

My problem is now I'm trying to prevent GPP from processing on Servers, since the majority of servers (besides TS) don't need printers, and IT staff logging into the servers are being slowed down while they wait for the GPP to process.
Changing ILT to add a "And NOT" servers OU doesn't help, as the login screen still shows Applying Group Policy Printers policy. (I'm assuming this is because of computer config settings.)

How can I stop the GPP from processing for Servers based on OU?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
All you need to do is create a group called Server_Computer_Objects, add all of your servers to this group. Then on the group policy click on the Delegation Tab.

- Click the Add button
- Add the Server_Computer_Objects group (or whatever group you used) to this Delegation
- Click the Advance button and then Deny the Server_Computer_Objects

Once you do this this policy will not apply to any of the machines that are in this group.

You can also do the reverse and create a group and only add users that you want for this policy to apply and then add this group to the security filtering. For the specific GPO.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Spike99On-Site IT TechnicianCommented:
Or, you could just link the GPP to the OU where the workstations are.
phiadminAuthor Commented:
Sorry for the delay, have been bogged down on other issues, and treating this as a low priority.

Was trying to avoid creating new groups, but will test out Will's suggestion.

Alicia, GPP is already linked only to the OU where the workstations (only, no servers) are, but because it is also linked to the users OU it processes when the user logs into the server.

Sorry I didn't mention it previously, but the GPO is linked to both a OU containing user workstations, and a OU containing users (regular, and admin/IT staff)
Spike99On-Site IT TechnicianCommented:
So, it's not possible to create a separate policy for printer deployment & then link that to the Workstation OU?
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Printers and Scanners

From novice to tech pro — start learning today.