We help IT Professionals succeed at work.

Deploying Printer on Windows 7 & 10 using Group Policy based on AD security group membership ?

Last Modified: 2018-05-24
I had this question after viewing How to connect the printer in workstation by GPO and by the site?.

I've got multiple office sites that spread across three different cities, under one AD domain/forest.

Site 1 - Site1 User Group
Printer 11
Printer 12
Printer 13

Site 2 - Site2 User Group
Printer 21
Printer 22
Printer 23

Site 3 - Site3 User Group
Printer 31
Printer 32
Printer 33

How can I deploy the printer above by using AD security group and then enforce the print settings to be B&W Duplex (both paper sides) but still allowing people to change the default printer behavior before printing in case they need to print in colour ?

At the moment the users does not have local admin rights, so any Printer add/remove or even driver update, must be done manually by the help desk team traveling and typing DOMAIN\Admin password on each workstation.
Watch Question

Senior Systems Admin
Top Expert 2010
Unlock this solution and get a sample of our free trial.
(No credit card required)
Senior IT System EngineerSenior Systems Engineer


Hi Adam,

So based on the "Default" printing button, does the user can change it by themselves to colour ? and then the next GPO refresh, it returns to B&W Duplex.

What about the behaviour of the printer when the driver gets updated ?
Do I have to travel and visit each user to type in the Administrator password to update the printer driver ?
Adam BrownSenior Systems Admin
Top Expert 2010

The user can change the settings to use Color, but that change should only apply for a single print job as long as the shared printer itself is configured to use Black and White. The printers need to be installed directly on a central print server, then shared from that server. Clients can then connect to the shared printer object to install the printer and its drivers on their workstation. With GPO preferences, the printer is installed using the System security context, so admin credentials are not necessary. If you change the printer drivers on the Print server, client machines should automatically update the print driver on next boot.
Senior IT System EngineerSenior Systems Engineer


That's what I want Adam:

1. Enforcing the B&W Duplex printing by default for all users, while still allowing them to change the color printing when necessary once off.
2. Automatically map the printer whenever the user logged on to any new PC or Workstation VM.
3. Avoid any needs to type in the Admin password for the driver update.
Senior IT System EngineerSenior Systems Engineer


Hi Adam,

How to setup the printer as default when it is deployed using GP Preference (Machine policy) mode ?
Senior IT System EngineerSenior Systems Engineer



This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.