Link to home
Start Free TrialLog in
Avatar of LockDown32
LockDown32Flag for United States of America

asked on

Struggling with GPOs

I have just started playing with GPOs. Trying to deploy a couple printers. I linked the Policies to the Computers OU but for some reason it isn't being applied. The two policies are Production LaserJet Pro and Lab LaserJet Pro.

I made up a Security Group for each and added the computers that I wanted to install the printers on to that Group. Then applied the policy to those security groups yet according to GPRESULT they aren't being applied. Screen shot attached. Thanks!
Capture.PNG
Capture.PNG
Capture.PNG
ASKER CERTIFIED SOLUTION
Avatar of arnold
arnold
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
He is the link reference to the mentioned pushprinterconnection.exe utility in the earlier comment.

https://technet.microsoft.com/en-us/library/cc772505(v=ws.10).aspx
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of LockDown32

ASKER

It is a Server 2012 Standard, The way I have been doing it is to first create and share the printer with both x86 and x64 drivers. Create the GPO and then going in to Control Panel and Print Manager to deploy via GPO. I did it that way for one printer and deployed it in the Default Domain Policy and it deployed fine. Then I was told not to use the Default Domain Policy so I tried a separate GPO linked to the Computers OU and haven't been able to get it to work.

When I run Group Policy Results from the Server it tells me that both polices are "Access Denied (Security Filtering)" when I apply it on one computer yet when I apply it to another computer in the same scope it deploys.

I made up a group (Security Group) and added three computers to it. That is the scope of the GPO. On two of the three computers it applies. On the third it is "Access Denied (Security Filtering)"
I think some more screen shots of the GPOs themselves would be helpful incl group, group membership, GPO scope and delegation and policy settings may help and a full output of gpresults command.
Thanks Peter but I found the problem. Kind of two fold. I had to run gpupdate /force on this problem workstation at which point the GPO took effect. I wasn't aware that when you ran gpresult on the server that it actually queried the workstation and if the workstation needed a gpupdate the server would not reflect that but simply show the gpo as denied and....

gpresult on a Windows 10 workstation doesn't work... even now that the GPO is working it does not show up as either applied or denied on this WIndows 10 workstation with a gpresult /h.
Not sure if this will help, but I have a article that was published on EE on How to Push Printers using Group Policy Preferences.

https://www.experts-exchange.com/articles/11321/Deploying-Printers-using-Group-Policy-Preferences.html

If may help or may not.
Please let me know