Avatar of samiam41
samiam41Flag for United States of America

asked on 

Options to roll-out 70+ printers/150+ users to office

Hey Experts.  I have a mid-sized (150'ish users) gov agency that uses many printers, roughly 70.  This is due to the nature of our office (legal) and the sensitive material printed which can't go to a "public" printer.  


To make this design work, I created AD groups (ie, LEG1 and LEG1-D) that we could assign users to and when they would login, our login script would run and install printers based on group membership.  The -D made the printer the default which was the trigger for the script to move on to the next section.


However, the latest MS patches that were released broke our printing design and in the short-term, I had to uninstall KB5005031 and 5005103 so that I could get printing running again.  


Many recommendations are to use GP's to assign/install printers which is a great concept but I'm not sure I completely grasp its application in all environments.  If I understand correctly, I would create a GP for the printer (LEG1), assign users to it and the GP would install that printer.


Based on that idea, would I need to create 70'ish GP's?  Surely that can't be the case and I'm not understanding how to use GP's to deploy printers.  


What I'm looking for here are 1) suggestions/guidance of putting a methodology in place that will work with the latest KB's and 2) if GP's can satisfy #1,  how to use those but not if it requires a GP for each printer.  


Thanks in advance for your help!

Printers and ScannersWindows 10Active DirectoryWindows Server 2016

Avatar of undefined
Last Comment
samiam41
ASKER CERTIFIED SOLUTION
Avatar of NVIT
NVIT
Flag of United States of America image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of samiam41
samiam41
Flag of United States of America image

ASKER

So I can create one policy, add all 70+ printers to it and specify which printer should go to which group?

As for the two group creation, yes, strictly for the login script to process which printers should be installed for that user and which to make the default.
Avatar of Scott Silva
Scott Silva
Flag of United States of America image

You do realize that there are TONS of workgroup printers that support printing to a secure box that the user then has to log in locally at the printer to get their docs, right?
Avatar of samiam41
samiam41
Flag of United States of America image

ASKER

Hey Scott.  Yes, well aware and have tested various options.  Sometimes non-technical people (especially elected officials) make technical decisions and technical people have to make those decisions work.  I can appreciate your suggestion and it's not an option for this office at this time.
Avatar of Scott Silva
Scott Silva
Flag of United States of America image

I do understand... I have a VP that signs every printer requisition, and another VP that complains how much money we spend on toner carts...
Avatar of samiam41
samiam41
Flag of United States of America image

ASKER

@Scott, that made me laugh and shake my head.  You get it.
Avatar of NVIT
NVIT
Flag of United States of America image

> So I can create one policy, add all 70+ printers to it and specify which printer should go to which group?

Yes. And set ILT for each group
Of course, first try a few to see how it works.
Avatar of samiam41
samiam41
Flag of United States of America image

ASKER

Thanks NVIT.  Exploring your suggestion now and will post back (most likely) tomorrow what progress I made.
Avatar of arnold
arnold
Flag of United States of America image

I father the printers are not HP as commonly, their drivers are included in the OS.

Another option if you have all the same type of printer, same manufacturer.

Setup one printer that used to push the drivers by conputer GPO and using print server to publish it. This way the driver will be added to the system and get the drivers installed without any user interaction.

You can then use user GPO or GPP to push the user specifuc printer which will use the already deployed drivers.
Avatar of samiam41
samiam41
Flag of United States of America image

ASKER

Thanks all.  There was a little more I needed to do in the background but that may not be the case for others so I held off posting those steps.

I appreciate everyone's time and replies.
Active Directory
Active Directory

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

86K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo