Deploying printers thru GPP
I have been assigned to create a update a vbs script previously used by the company to update connection and drivers to users.
Part of the requirement was to migrate the script to PowerShell. After encountering problems in retrieving printers configure by computer. The PowerShell script will not retrieve these printers while vbs will unless if I will add the connection thru PowerShell
first. Finally I decided to look for others means of deploying printer, I found that GPP(Client Side Extension) is very easy to do this task and it also provide a way to monitor problems by tracking the EventId generated when printer problems occurs.
Having confirmed this. There is documentation, from the previous admin who try to use GP to deploy printers and encounter configuration problems when they switch to HP printers. Previous Printer Server reside in a Windows 2003 dedicated server
in AD 2008 R2 and workstation Windows 7. Is there any documentation or article that confirm this abnormality?
michael john ocasio
Hi,
If you have only Windows 7 and 2008 R2 you can follow this link to deploy Printer through GPo using the
Print Management:
Deploying Printers by Using Group Policy
Best regards Bourbita Thameur Microsoft Certified Technology Specialist: Windows Server 2008 R2,Server Virtualizaton
Similar Messages
-
Deploying printers with gpp cse to computers and setting the default printer results in this error
The computer printername preference item in the 'Printer deployment' Group Policy object did not apply because it failed with error code '0x80070709 The printer name is invalid.' This error was suppressed.
I've read that this is a timing issue does anyone have any thoughts on this> The computer printername preference item in the 'Printer deployment'
> Group Policy object did not apply because it failed with error code
> '0x80070709 The printer name is invalid.' This error was suppressed.
As in your other thread: There is no default printer for computers, so
your XML hack "might" produce the expected result or it - as in this
case - doesn't.
> I've read that this is a timing issue does anyone have any thoughts on this
If it IS a timing issue, enable
http://gpsearch.azurewebsites.net/#1839
and configure
http://gpsearch.azurewebsites.net/#319 to 60 or 90 seconds.
Greetings/Grüße,
Martin
Mal ein
gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me -
coke bottle design refreshment (-: -
Win32_Printer Doesn't List GPO-Deployed Printers
So we have some legacy printer GPOs (not GPP) and we occasionally have issues with the printer deployments. I am attempting to troubleshoot this on remote computers and I found that Win32_Printer does not list any of these printers.
However, if I deploy a printer via GPP (user-based), it is listed in the output of Win32_Printer. What's the difference between the way these printers are deployed? Is there anything that will allow me to list and remove the GPO deployed printers programmatically
(printui, etc)?
Thanks!Hi Matt,
Would you please let us know current situation of this issue? Please refer to Alan’s suggestion and check if
can help you.
à
we have some legacy printer GPOs (not GPP) and we occasionally have issues with the printer deployments.
I understand that
Win32_Printer does not list GPO deployed printers when there have issues with the printer deployments. If deployed printer successfully via GPO, will
Win_32 Printer still no list those GPO deployed printers? Just a confirmation, Thanks for your understanding.
For Win32_Printer class, please also refer to following article and check if can help you.
Win32_Printer class
If any update, please feel free to let us know.
Hope this helps.
Best regards,
Justin Gu -
I'm trying to prepare our school system for Windows 7 (we currently use XP). I would like to use the new Group Policy Preferences method of deploying printers. I pushed out the XP client side extensions through WSUS. In my test environment, I added the shared printer in group policy preferences. My XP machine had the printers show up automatically, but my Windows 7 machine did not. I realized that I had previously connected a printer of the same type to my XP machine before and the drivers were already installed. To test this theory, I manually connected the shared printers to the Windows 7 machine, deleted them, then logged off and back on. Now the printers are showing up from group policy. My question is does using group policy preferences to deploy printers require the print driver to be pre-installed? If not, then what am I doing wrong? If so, is there a way to work around this? Thanks for your help.
EDIT: To clarify, I am using the share method in GPP. This is the error message I get in the event log:
The user 'PRINTERNAME' preference item in the 'win7 printer test {946461A1-27F8-406F-A0B3-0A1A05AF34F6}' Group Policy object did not apply because it failed with error code '0x80070bcb The specified printer driver was not found on the system and needs to be downloaded.' This error was suppressed.This link have a description of resolution:
http://technet.microsoft.com/en-us/library/cc725938.aspx
Open the GPMC.
Open the GPO where the printer connections are deployed, and navigate to Computer Configuration, Policies, Administrative Templates, Control
Panel, and thenPrinters.
Note
The Point and Print Restrictions setting can also be found under User Configuration\Policies\Administrative Templates\Control Panel\Printers.
This policy is ignored by Windows 7 and Windows Server 2008 R2, but is enforced by earlier editions of Windows including Windows XP with SP1, Windows Server 2003 with SP1, and Windows Server 2008. We recommend that you change
this policy setting in both locations so that all down-level clients have a consistent experience.
Right-click Point and Print Restrictions, and then click Properties.
Click Enabled.
Clear the following check boxes:
Users can only point and print to these servers
Users can only point and print to machines in their forest
In the When installing drivers for a new connection box, select Do not show warning or elevation prompt.
Scroll down, and in the When updating drivers for an existing connection box, select Show warning only.
Click OK. -
Deploying Printers With Group Policy Preferences
Ok so I know this is an old topic but I need to clarify my position a bit here to best decide how to deploy printers to our organization.
We currently have about 600 printers on a Server 2012 R2 print server and we have 25 buildings. For several years we have deployed printers in GPO the old-fashioned way - user Deployed Printers. There have always been problems with this stemming
from issues with multiple print driver installs on the client computers. That aside, the philosophy works out pretty well. We have NTFS permissions on the print queues that handle who can print to what. GPOs are linked to the staff OUs for each building that
actually deploy the printers. This means that you have to have the GPO for a building and also have to have permission to the printer in order for it to actually install. When a user is removed from a particular building group then at next policy refresh the
printers granted to that group go away. This is good.
Based on the way that preferences work I think that they could solve our problems with occasional failed driver installs, but I can't find a way to reproduce the behavior I described above. If I use create, a user can be deployed a printer but if permission
to that printer is removed then the printer stays behind and they get an access denied error when they attempt to print to it. Same with Update. Replace sort of mimics the desired behavior but deletes and recreates the printer every time policy refreshes.
This wouldn't be a deal-breaker at logon, but it even happens while a user is logged in and policy updates in the background. They could potentially be attempting to print something and the printer will just disappear momentarily.
Is there something else I am missing here that I can configure in order to take advantage of GPP printer deployments in our environment? Thanks!Hi Matt,
As far as I know, if we choose to use GPP Printer extension to deploy printers, the printers will leave behind even if the policy is out of scope, unless we select the above mentioned option or delete the printers.
>>There have always been problems with this stemming from issues with multiple print driver installs on the client computers.
To tackle this issue, had we disabled the following policy setting?
Computer Configuration\Policies\Administrative Templates\Printers : Point and Print Restrictions
If not, we can disable this setting, which will disable driver installation warning messages and elevation prompts on computers.
Regarding this policy setting, the following article can be referred to for more information.
Control Printer Driver Installation Security
http://technet.microsoft.com/en-us/library/cc753269.aspx
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here
Best regards,
Frank Shen
Frank,
Sorry for the delay, I recently had another issue take precedence over this one so didn't have much time to mull this over or test.
We currently have policy set to enable Point and Print restrictions, but allow driver installation from our print server. This should effectively be the same as what you have recommended.
I believe our driver installation issues have more to do with the large number of different printer models and sometimes the sheer number of printers that can be installed for each user. These are things that we have culturally always been there and probably
won't change. What happens is that when a printer deployment fails no other printers will be installed after that one. The reason is that starting with Windows 7 the printer deployment policy will only be re-evaluated if changes to the policy are detected.
So if a user is deployed 50 printers and one in the middle of the deployments fails, everything after that alphabetically fails and it doesn't retry until the GPO changes.
So far from my limited testing GPP printers gets around this since each printer is essentially a separate object and installation of one does not seem to affect the others. However, I don't like the idea that there is no way to replicate the behavior we
currently have which is to remove printers when the GPO is no longer applied. I may convince the powers that be that we need to change our philosophy about this and train our users to remove printers after they have changed buildings or positions, but for
now I think we will stick with traditional printer GPOs rather than using GPP.
Thanks for your help! -
Hi,
I've some bizarre problems when deploying printers, so I just hope you can give me few hints on where or what to check here.
We've one domain, 2 DC (older, physical dc is 2003 and vm one as 2008r2).
We've 2 print servers (2008R2) and a new one i'm creating from scratch, 2012R2.
Everything but the new 2012R2 print server was managed by external people so I basically have no idea of what's been done there, just have faith it's somehow working.
Older print servers have about 150 printers each one, and we've hundeds of GPO in our DCs (we've more than 4000 client computers to control and about 40000 users in our DC, so it's not easy to make some steps/decisions).
Now, the problem (mainly noticed on the 2008 servers):
When I change to a GPO that deploys printers to our clients, operations such as adding a printer or changing a driver usually is 'Ok', but
sometimes seems like GPO aren't applied at all on clients. Spooler on clients start crashing (win7 clients show green progress bar and never show printers, win 8 crashes spooler process) and so on. Doing a gpupdate
says everything is ok, but changes aren't applied.
Funniest thing is when I try to remove a printer from deploying (for example, for problems with current driver on that printer). I remove it from GPO either from 'Deploy by group policy' context menu at printmanagement.msc, or editing printer connections
on GPO. No matter how I do this, seems like a local, cached copy of the GPO keeps in client computer, so I get printer even if removed, and later if I deploy it again, I get two or even tree copies of same printer! (or if I remove printer from server, clients
show me a ghost printer since it doesn't exists anymore!).
I believe this problem has been hanging for months or years, but not until now people has decided to start using print servers seriously and they were using printers locally, so the problem is now showing in full splendor.
Also, as last but not least, want to say that the way GPOs deploy printers is:
- Deploy printer per machine
- Same GPO is used for both older XP and new Win7 and Win8 clients, so GPO executes pushprinterconnections.
I was thinking in redoing all (over 150) printer deployment GPO using GPP instead, but while there are these problems (and where we still have XP) won't be able to do that, so any help would be appreciated.
ThanksHi Alan,
Will try these GPO, but according to the URL, I should put:
Execute Print Drivers in Isolated Processes = enabled (same as not configured)
Override Print Driver Execution Compatibility Setting Reported by Print Driver = disabled (again, same as not configured)
So, both options should be 'active'. I've made changes in server side (changed driver from shared or none to isolated, with no luck). Must I remove printer from deploy and later readd when I make an isolation change?
Anyway, on my Win8 testing box, I noticed there are printers still showing even GPO that put them there isn't active anymore.
Found that there was a copy of GPO in
c:\windows\system32\grouppolicy\Datastore\0\sysvol\<domain name>\Policies
So I manually deleted shared printers, renamed folder inside Datastore from 0 to 1 to prevent old policies to execute, executed gpupdate /force (folder 0 was created again with a new copy of GPO), but again, old printers appeared there.
Did a registry search of ghost printer names, found them in:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\<SERVERNAME>\Monitors\Client Side Port\{043C1464-A566-4CB0-AFE7-24DC71DEF147}
And in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers\<SERVERNAME>\Printers\{043C1464-A566-4CB0-AFE7-24DC71DEF147}
Also, found them duplicated in HKLM\Software\Wow6432Node\<blablabla>...
Not sure what {043C1464-A566-4CB0-AFE7-24DC71DEF147} is (doesn't resemble any GPO UID, but I could be a testing GPO I already deleted), nor sure why it's there or if it's safe to remove them from registry.
Hope this info gives any hint of why are them still there, problem with GPO, with print server, domain, or just client computer (altough there are more and more computers with this problem spanning).
As for the reason about not using user deployment, basically it's 'previous admins told us to keep doing this way as the did always'. Anyway, where we have this problem, that is, co-workers computers, there are one or at most 2 workers on every computer,
so made sense to put them on computer. Anyway, today I did several tests with GPP using per user on a new OU, and got mixed feelings. Liked the way it created, but disliked the fact that every few minutes (guess it was every time gpo was rechecked), default
printer was modified to local ones (guess that was because i didn't marked any printer as default one). But this isn't relevant either for this tread, so I'll investigate more (and hopefully won't have to post questions for it :-)
Thanks in advance -
Could someone please tell me how to set up deploying printers in Server 2008? I have the Print Management installed as well as the printers I want however I do not know how to set up the policies.
I want to deploy them based on computer. How do I make a group of computers? For example: computers 1-5 would be one group/department, then I would add certain printers to that group.
Also, is there a way to delete existing printers on their machine? How about setting as default?
Sorry but I've never had to deploy policies by group since all settings we have apply to all users (we work on Terminal Servers for the most part but this is for local printers).Hi Lynnette74,
Based on my understanding, you would like to learn how to deploy a printer via GPO. Right?
In addition to Bruno van Dooren's suggestion, you can also use Group Policy preferences to deploy printer. For your information, please refer to the following article:
Configure a Local Printer Item
GP Preferences: Add a new printer, set as default
You want to deploy printers based on computer, you can create an OU which contains the computers which would be one group or department and the configure the GPP under
Computer Configuration. Then you can configure the GPO which deploys a printer to this OU. And it will be easy to configure the printer as the default printer via the GPP configuration. The settings of the GPO will overwrite
the existing printers.
Hope that helps!
Regards,
Lany Zhang
I think my issue is that I'm not sure how to do that OU. Right now, all computers go into a folder in the AD called "Computers." This happens automatically. Are you saying I would move those computers into separate groups? Is there a way to copy them so I have
the whole list stay under the "Computers" folder but also have a copy in a second group so I can create a policy for them? -
We have deployed printers from the Print Manager MMC to our computers. However, two new Windows 8.1 computers don't get the printers. GPResult shows the policy has not applied after many logins. Is there some change for printers under 8.1?
Jim Haynie Director of Technology | Chapel Hill-Chauncy Hall School 785 Beaver Street, Waltham, MA 02452 www.chch.org | We Teach the Way Students LearnHi,
Since the printer policy could not apply to Windows 8.1 machines, please let me know what is the OS version of the printer server? Please try to create a separate GPO using RSAT on Windows
8.1 machines and only apply to those Windows 8.1 machines to see if it works. Please configure the policy settings under the following path in GPMC: User configuration/Policies/Windows Settings/Deployed Printers.
Description of Remote Server Administration Tools for Windows 8.1 and Remote Server Administration Tools for Windows 8
http://support.microsoft.com/kb/2693643/en-us
Hope this helps.
Best Regards,
Andy Qi
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.
Andy Qi
TechNet Community Support -
Windows 8.1 Update - issues deploying printers via GPO from a 2012R2 Print Server
Hi,
I am trying to deploy a single printer to Windows 8.1 clients in a K-12 environment. We have about 1200 laptops and about 25% of those laptops are installing the printer. Several different users can log on and the printer may or may not be there. The printer
is being deployed to the Computer not the User. If the printer was successfully installed shouldn't the printer be available immediately after logging in with different AD accounts? Sometimes it shows up 10mins later as if it needed to install it again. I
read the changes from v3 to v4 printing in Windows 8, Ive checked the event log errors, printer shares, etc. Deploying Printers to Windows 8.1 clients is poor at best even when it supposed to be easier for IT to manage. Also I was under the impression that
Windows 8.1 clients do not attempt to downloads drivers from a windows print server anymore as they opt to use a v4 print class driver.
Environment Details:
Windows 2012R2 Printer Server all patched, Windows 8.1 all patched, AD users are identical as well as the computers (reside in the same OUs) Printer is deployed to the computers, Point and print restrictions is completely disabled. Restarting the print spooler
on the client has little to no effect. Computers connect wirelessly to the network and print server is in the same building. Started pushing to the user as well to see if it helps. Windows 7 clients are unaffected and get the printer consistently.
Errors:
The print spooler failed to download and import the printer driver from \\Server into the driver store for driver KONICA MINOLTA C652SeriesPS. Error code= 800f0242.
The print spooler failed to import the printer driver that was downloaded from \\Server\print$\x64\PCC\koazca__.inf_amd64_664b51505681ff6d.cab into the driver store for driver KONICA MINOLTA C652SeriesPS. Error code= 800f0242. This can occur if there is
a problem with the driver or the digital signature of the driver.
The default printer was changed to \\Server\Konica_Copier,winspool,Ne05:. See the event user data for context information.error from event id 600?
http://technet.microsoft.com/en-us/library/dd393207(v=ws.10).aspx
did install this hotfix?
http://support.microsoft.com/kb/2961042/en-us
those maybe helpful...
http://social.technet.microsoft.com/Forums/windowsserver/en-US/4de0cf6f-3e05-4de4-b1f5-349d27b97234/windows-server-2008-r2-trouble-updating-client-kyocera-drivers?forum=winserverprint
http://download.microsoft.com/download/5/8/1/581A3BB7-503D-48DA-B898-2BF80FA2A7E7/Understand_and_Troubleshoot_Printing_in_Windows_Server_8_Beta.docx
Best,
Howtodo -
Deploy applications thru autodeploy in production mode in Weblogic 10
In Weblogic 10, we can deploy applications though autodeploy in development mode. But now I need to deploy my applications in production mode. Iam very much convenient using autodeploy. Can I use this autodeploy in production mode..?..Any alternative..?
Will there be any problems If I deploy things thru autodeploy in production mode..?
Please help..
Thanks.Kumar_Spore <> wrote:
In Weblogic 10, we can deploy applications though autodeploy in
development mode. But now I need to deploy my applications in production
mode. Iam very much convenient using autodeploy. Can I use this autodeploy
in production mode..?..Any alternative..? Will there be any problems If I
deploy things thru autodeploy in production mode..? Please help.. Thanks.Hi,
As far as I know, the autodeploy will not work as soon as your weblogic
instance is in production mode.
And this mostly for 'security' reasons.
Imagine that you have an application running in production, you don't want
to deploy something 'unplanned' or allow mistakes by administrators. And
with autodeploy you can easily copy something wrong.
B
Schelstraete Bart
[email protected]
http://www.schelstraete.org -
Deploying printers takes 2 logins to show up
We're trying to deploy printers through group policy. It works but if you reboot a PC Then the user logs in they aren't there, but if you log out and back in they are. It always seems to take 2 logins to get the printers. Can this be fixed?
JasonSure thing here it is let me know if you see anything that can help
Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC;
background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999;
} th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold;
border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px;
padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF;
border:1px solid #000000; } }
Setting Path:
Explanation
Print
Close
No explanation is available for this setting.
Supported On:
Not available
Group Policy Results
CRCSD\kennmantest
Data collected on: 11/14/2014 4:12:29 PM hide all
Summaryhide
No data available.
During last user policy refresh on 11/14/2014 4:10:09 PM
A fast link was detected More information...
Computer Detailshide
No data available.
User Detailshide
Generalhide
User name CRCSD\kennmantest
Domain crcsd.abc
Organizational Unit crcsd.abc/Special/Student Mandatory
Security Group Membership show
CRCSD\Domain Users
Everyone
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
NT AUTHORITY\This Organization
LOCAL
CRCSD\Kenn Mandatory
CRCSD\Dist Lock Games
CRCSD\Kenn Students
CRCSD\Students
CRCSD\Kenn Lock Games
Mandatory Label\Medium Mandatory Level
Component Statushide
Component Name Status Time Taken Last Process Time Event Log
Group Policy Infrastructure Success 11/14/2014 4:10:09 PM
Deployed Printer Connections Success 11/14/2014 2:31:19 PM
Folder Redirection Success 11/14/2014 4:09:59 PM
Group Policy Drive Maps Success 11/14/2014 2:31:19 PM
Group Policy Printers Success 11/14/2014 2:31:46 PM
Group Policy Registry Success 11/14/2014 2:31:20 PM
Group Policy Shortcuts Success 11/14/2014 2:31:49 PM
Internet Explorer Zonemapping Success (no data) 11/14/2014 2:31:16 PM
Registry Success 11/14/2014 2:31:16 PM
Settingshide
Policieshide
Windows Settingshide
Security Settingshide
Public Key Policies/Certificate Services Client - Auto-Enrollment Settingshide
Policy Setting Winning GPO
Automatic certificate management Enabled [Default setting]
Option Setting
Enroll new certificates, renew expired certificates, process pending certificate requests and remove revoked certificates Disabled
Update and manage certificates that use certificate templates from Active Directory Disabled
Log expiry events, and, for user policy, only show expiry notifications when the percentage of remaining certificate lifetime is 10% [Default setting]
Additional stores to log expiry events [Default setting]
Display user notifications for expiring certificates in user and computer MY store Disabled [Default setting]
Software Restriction Policieshide
Winning GPO Lock Games
Enforcement
Policy Setting
Apply Software Restriction Policies to the following All software files except libraries (such as DLLs)
Apply Software Restriction Policies to the following users All users
When applying Software Restriction Policies Ignore certificate rules
Designated File Types
File Extension File Type
ADE Microsoft Access Project Extension
ADP Microsoft Access Project
BAS BAS File
BAT Windows Batch File
CHM Compiled HTML Help file
CMD Windows Command Script
COM MS-DOS Application
CPL Control panel item
CRT Security Certificate
EXE Application
HLP Help file
HTA HTML Application
INF Setup Information
INS INS File
ISP ISP File
LNK Shortcut
MDB Microsoft Access Database
MDE Microsoft Access MDE Database
MSC Microsoft Common Console Document
MSI Windows Installer Package
MSP Windows Installer Patch
MST MST File
OCX ActiveX control
PCD PCD File
PIF Shortcut to MS-DOS Program
REG Registration Entries
SCR Screen saver
SHS SHS File
URL Internet Shortcut
VB VB File
WSC Windows Script Component
Trusted Publishers
Trusted publisher management Allow all administrators and users to manage user's own Trusted Publishers
Certificate verification None
Software Restriction Policies/Security Levelshide
Policy Setting Winning GPO
Default Security Level Unrestricted Lock Games
Software Restriction Policies/Additional Ruleshide
Hash Ruleshide
Chess.exe (6.1.7600.16385); Chess.exe; Executable for Chess Game; Microsoft® Windows® Operating System; Microsoft Corporation
Security Level Disallowed
Description Games - Chess
Date last modified 9/26/2013 10:05:29 AM
Winning GPO Lock Games
freecell.exe (6.1.7600.16385); freecell.exe; Executable for FreeCell Game; Microsoft® Windows® Operating System; Microsoft Corporation
Security Level Disallowed
Description Games - FreeCell
Date last modified 9/26/2013 10:05:54 AM
Winning GPO Lock Games
hearts.exe (6.1.7600.16385); hearts.exe; Executable for Hearts Game; Microsoft® Windows® Operating System; Microsoft Corporation
Security Level Disallowed
Description Games - Hearts
Date last modified 9/26/2013 10:06:13 AM
Winning GPO Lock Games
mahjong.exe (6.1.7600.16385); mahjong.exe; Executable for Mahjong Titans Game; Microsoft® Windows® Operating System; Microsoft Corporation
Security Level Disallowed
Description Games - Mahjong
Date last modified 9/26/2013 10:06:30 AM
Winning GPO Lock Games
minesweeper.exe (6.1.7600.16385); minesweeper.exe; Executable for Minesweeper Game; Microsoft® Windows® Operating System; Microsoft Corporation
Security Level Disallowed
Description Games - Minesweeper
Date last modified 9/26/2013 10:06:43 AM
Winning GPO Lock Games
purbleplace.exe (6.1.7600.16385); purbleplace.exe; Executable for Purble Place Game; Microsoft® Windows® Operating System; Microsoft Corporation
Security Level Disallowed
Description Games - Purble Palace
Date last modified 9/26/2013 10:07:01 AM
Winning GPO Lock Games
solitaire.exe (6.1.7600.16385); solitaire.exe; Executable for Solitaire Game; Microsoft® Windows® Operating System; Microsoft Corporation
Security Level Disallowed
Description Games - Solitare
Date last modified 9/26/2013 10:07:16 AM
Winning GPO Lock Games
spidersolitaire.exe (6.1.7600.16385); spidersolitaire.exe; Executable for Spider Solitaire Game; Microsoft® Windows® Operating System; Microsoft Corporation
Security Level Disallowed
Description Games - Spider Solitaire
Date last modified 9/26/2013 10:07:39 AM
Winning GPO Lock Games
Path Ruleshide
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
Security Level Unrestricted
Description
Date last modified 9/26/2013 9:51:08 AM
Winning GPO Lock Games
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
Security Level Unrestricted
Description
Date last modified 9/26/2013 9:51:08 AM
Winning GPO Lock Games
C:\Program Files\Microsoft Games
Security Level Disallowed
Description Games Folder for Windows 7
Date last modified 9/26/2013 9:55:33 AM
Winning GPO Lock Games
Folder Redirectionhide
Documentshide
Winning GPO Student Best Practices
Setting: Basic (Redirect everyone's folder to the same location)hide
Path: \\dist-data2\techtest\manaccts\
Optionshide
Grant user exclusive rights to Documents Disabled
Move the contents of Documents to the new location Disabled
Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systems Disabled
Policy Removal Behavior Leave contents
Configuration Control Group Policy
Primary Computer Evaluation Not evaluated because primary computer policy is not enabled
Musichide
Winning GPO Student Best Practices
Setting: Basic (Redirect everyone's folder to the same location)hide
Path: \\dist-data2\techtest\manaccts\My Music
Optionshide
Grant user exclusive rights to Music Disabled
Move the contents of Music to the new location Disabled
Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systems Disabled
Policy Removal Behavior Leave contents
Configuration Control Group Policy
Primary Computer Evaluation Not evaluated because primary computer policy is not enabled
Pictureshide
Winning GPO Student Best Practices
Setting: Basic (Redirect everyone's folder to the same location)hide
Path: \\dist-data2\techtest\manaccts\My Pictures
Optionshide
Grant user exclusive rights to Pictures Disabled
Move the contents of Pictures to the new location Disabled
Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systems Disabled
Policy Removal Behavior Leave contents
Configuration Control Group Policy
Primary Computer Evaluation Not evaluated because primary computer policy is not enabled
Videoshide
Winning GPO Student Best Practices
Setting: Basic (Redirect everyone's folder to the same location)hide
Path: \\dist-data2\techtest\manaccts\My Videos
Optionshide
Grant user exclusive rights to Videos Disabled
Move the contents of Videos to the new location Disabled
Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systems Disabled
Policy Removal Behavior Leave contents
Configuration Control Group Policy
Primary Computer Evaluation Not evaluated because primary computer policy is not enabled
Administrative Templateshide
Policy definitions (ADMX files) retrieved from the central store.Control Panel/Personalizationhide
Policy Setting Winning GPO
Enable screen saver Disabled Student Best Practices
Prevent changing desktop background Enabled Student Best Practices
Control Panel/Printershide
Policy Setting Winning GPO
Point and Print Restrictions Disabled Default Domain Policy
Microsoft Office 2013/Global Options/Customizehide
Policy Setting Winning GPO
Allow roaming of all user customizations Enabled Student Best Practices
Microsoft Office 2013/Miscellaneoushide
Policy Setting Winning GPO
Disable the Office Start screen for all Office applications Enabled Student Best Practices
Start Menu and Taskbarhide
Policy Setting Winning GPO
Prevent changes to Taskbar and Start Menu Settings Enabled Student Best Practices
Systemhide
Policy Setting Winning GPO
Don't run specified Windows applications Enabled Lock Games
List of disallowed applications
install.exe
mahjong.exe
setup.bat
minesweeper.exe
sol.exe
spider.exe
pinball.exe
solitaire.exe
winmine.exe
setup.exe
spidersolitaire.exe
hearts.exe
mshearts.exe
install.bat
freecell.exe
purbleplace.exe
chess.exe
poledit.exe
Policy Setting Winning GPO
Prevent access to registry editing tools Enabled Student Best Practices
Disable regedit from running silently? No
System/Driver Installationhide
Policy Setting Winning GPO
Code signing for device drivers Enabled Student Mandatory
When Windows detects a driver file without a digital signature: Ignore
Windows Components/Internet Explorerhide
Policy Setting Winning GPO
Pop-up allow list Enabled Student Best Practices
Enter the list of sites here. Source GPO
*.mmhpr.com Student Best Practices
*.vantage.com Student Best Practices
*.programworkshop.com Student Best Practices
Policy Setting Winning GPO
Prevent running First Run wizard Enabled Student Best Practices
Select your choice Go directly to home page
Windows Components/Internet Explorer/Internet Control Panel/Security Pagehide
Policy Setting Winning GPO
Site to Zone Assignment List Enabled Student Best Practices
Enter the zone assignments here. Source GPO
http://*.mmhpr.com 2 Student Best Practices
http://*.platoweb.com 2 Student Best Practices
https://*.platoweb.com 2 Student Best Practices
adfs.cr.k12.ia.us 1 Student Best Practices
crcsd.sharepoint.com 1 Student Best Practices
https://*.instructure.com 2 Student Best Practices
https://*.mmhpr.com 2 Student Best Practices
Windows Components/Internet Explorer/Privacyhide
Policy Setting Winning GPO
Turn off Tracking Protection Enabled Student Best Practices
Preferenceshide
Windows Settingshide
Drive Mapshide
Drive Map (Drive: I)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.I:hide
Winning GPO Student Mandatory
Result: Failure (Error Code: 0x80070035)Generalhide
Action Update
PropertiesLetter I
Location \\KENN-AP1.crcsd.abc\kenn-std-apps
Reconnect Disabled
Use first available Disabled
Hide/Show this drive No change
Hide/Show all drives No change
Drive Map (Drive: M)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.M:hide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesLetter M
Location \\DIST-AP1.crcsd.abc\dist-std-apps
Reconnect Disabled
Use first available Disabled
Hide/Show this drive No change
Hide/Show all drives No change
Drive Map (Drive: K)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.K:hide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesLetter K
Location \\DIST-DATA3.crcsd.abc\kenn-std-data
Reconnect Disabled
Use first available Disabled
Hide/Show this drive No change
Hide/Show all drives No change
Registryhide
Registry item (Key path: HKEY_CURRENT_USER\Control Panel\Desktop, Value name: Wallpaper)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Wallpaperhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesHive HKEY_CURRENT_USER
Key path Control Panel\Desktop
Value name Wallpaper
Value type REG_SZ
Value data \\DIST-AP1.crcsd.abc\Dist-std-apps\Mandatory\Kennedy\kenn.bmp
Registry item (Key path: HKEY_CURRENT_USER\Control Panel\Desktop, Value name: WallpaperStyle)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.WallpaperStylehide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesHive HKEY_CURRENT_USER
Key path Control Panel\Desktop
Value name WallpaperStyle
Value type REG_SZ
Value data 2
Registry item (Key path: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar, Value name: Locked)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Lockedhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesHive HKEY_CURRENT_USER
Key path Software\Microsoft\Internet Explorer\Toolbar
Value name Locked
Value type REG_DWORD
Value data 0x1 (1)
Registry item (Key path: HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Value name: HomePage)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.HomePagehide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesHive HKEY_CURRENT_USER
Key path Software\Policies\Microsoft\Internet Explorer\Control Panel
Value name HomePage
Value type REG_DWORD
Value data 0x1 (1)
Registry item (Key path: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MINIE, Value name: LinksBandEnabled)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.LinksBandEnabledhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesHive HKEY_CURRENT_USER
Key path Software\Microsoft\Internet Explorer\MINIE
Value name LinksBandEnabled
Value type REG_DWORD
Value data 0x1 (1)
Registry item (Key path: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MINIE, Value name: ShowTabsBelowAddressBar)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.ShowTabsBelowAddressBarhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesHive HKEY_CURRENT_USER
Key path Software\Microsoft\Internet Explorer\MINIE
Value name ShowTabsBelowAddressBar
Value type REG_DWORD
Value data 0x1 (1)
Registry item (Key path: HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main, Value name: Start Page)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Start Pagehide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesHive HKEY_CURRENT_USER
Key path Software\Policies\Microsoft\Internet Explorer\Main
Value name Start Page
Value type REG_SZ
Value data http://kenn.cr.k12.ia.us
Shortcutshide
Shortcut (Path: C:\Users\kennmantest\Favorites\Links\Canvas.url)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Canvashide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
AttributesTarget type URL
Shortcut path C:\Users\kennmantest\Favorites\Links\Canvas.url
Target URL http://crcsd.instructure.com
Shortcut key None
Run Normal window
Shortcut (Path: C:\Users\kennmantest\Favorites\Links\CR Schools Homepage.url)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.CR Schools Homepagehide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
AttributesTarget type URL
Shortcut path C:\Users\kennmantest\Favorites\Links\CR Schools Homepage.url
Target URL http://www.cr.k12.ia.us
Shortcut key None
Run Normal window
Shortcut (Path: C:\Users\kennmantest\Desktop\Excel 2013.lnk)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Excel 2013hide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
AttributesTarget type File system object
Shortcut path C:\Users\kennmantest\Desktop\Excel 2013.lnk
Target path C:\Program Files (x86)\Microsoft Office\Office15\EXCEL.EXE
Icon path C:\Program Files (x86)\Microsoft Office\Office15\EXCEL.EXE
Icon index 0
Shortcut key None
Run Normal window
Shortcut (Path: C:\Users\kennmantest\Desktop\Canvas.url)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Canvashide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
AttributesTarget type URL
Shortcut path C:\Users\kennmantest\Desktop\Canvas.url
Target URL http://crcsd.instructure.com
Shortcut key None
Run Normal window
Shortcut (Path: C:\Users\kennmantest\Desktop\Word 2013.lnk)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Word 2013hide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
AttributesTarget type File system object
Shortcut path C:\Users\kennmantest\Desktop\Word 2013.lnk
Target path C:\Program Files (x86)\Microsoft Office\Office15\WINWORD.EXE
Icon path C:\Program Files (x86)\Microsoft Office\Office15\WINWORD.EXE
Icon index 0
Shortcut key None
Run Normal window
Shortcut (Path: C:\Users\kennmantest\Favorites\Links\PowerSchool.url)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.PowerSchoolhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
AttributesTarget type URL
Shortcut path C:\Users\kennmantest\Favorites\Links\PowerSchool.url
Target URL http://pscr.gwaea.org
Shortcut key None
Run Normal window
Shortcut (Path: C:\Users\kennmantest\Favorites\Links\Office 365.url)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Office 365hide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
AttributesTarget type URL
Shortcut path C:\Users\kennmantest\Favorites\Links\Office 365.url
Target URL https://crdistrict-my.sharepoint.com/
Shortcut key None
Run Normal window
Shortcut (Path: C:\Users\kennmantest\Desktop\PowerSchool.url)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.PowerSchoolhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
AttributesTarget type URL
Shortcut path C:\Users\kennmantest\Desktop\PowerSchool.url
Target URL http://pscr.gwaea.org
Shortcut key None
Run Normal window
Shortcut (Path: C:\Users\kennmantest\Desktop\Shortcuts.lnk)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Shortcutshide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
AttributesTarget type File system object
Shortcut path C:\Users\kennmantest\Desktop\Shortcuts.lnk
Target path \\DIST-AP1.crcsd.abc\Dist-std-apps\Mandatory\Kennedy\Shortcuts
Shortcut key None
Run Normal window
Shortcut (Path: C:\Users\kennmantest\Desktop\PowerPoint 2013.lnk)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.PowerPoint 2013hide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
AttributesTarget type File system object
Shortcut path C:\Users\kennmantest\Desktop\PowerPoint 2013.lnk
Target path C:\Program Files (x86)\Microsoft Office\Office15\POWERPNT.EXE
Icon path C:\Program Files (x86)\Microsoft Office\Office15\POWERPNT.EXE
Icon index 0
Shortcut key None
Run Normal window
Shortcut (Path: C:\Users\kennmantest\Desktop\Internet Explorer.lnk)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Internet Explorerhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
AttributesTarget type File system object
Shortcut path C:\Users\kennmantest\Desktop\Internet Explorer.lnk
Target path C:\Program Files (x86)\Internet Explorer\iexplore.exe
Icon path C:\Program Files (x86)\Internet Explorer\iexplore.exe
Icon index 0
Shortcut key None
Run Normal window
Shortcut (Path: C:\Users\kennmantest\Desktop\Office 365.url)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Office 365hide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
AttributesTarget type URL
Shortcut path C:\Users\kennmantest\Desktop\Office 365.url
Target URL https://crdistrict-my.sharepoint.com/
Shortcut key None
Run Normal window
Control Panel Settingshide
Printershide
Local Printer (Name: Microsoft XPS Document Writer)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Microsoft XPS Document Writerhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesName Microsoft XPS Document Writer
Port XPSPort
Shared printer path Microsoft XPS Document Writer
Set this printer as default printer True
Shared Printer (Name: \\KENN-PRINT1.crcsd.abc\Kenn-68-1nb)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Kenn-68-1nbhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesShare Path \\KENN-PRINT1.crcsd.abc\Kenn-68-1nb
Set this printer as default printer False
Local Port
Shared Printer (Name: \\KENN-PRINT1.crcsd.abc\Kenn-220-1nb)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Kenn-220-1nbhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesShare Path \\KENN-PRINT1.crcsd.abc\Kenn-220-1nb
Set this printer as default printer False
Local Port
Shared Printer (Name: \\KENN-PRINT1.crcsd.abc\Kenn-359-1nb)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Kenn-359-1nbhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesShare Path \\KENN-PRINT1.crcsd.abc\Kenn-359-1nb
Set this printer as default printer False
Local Port
Shared Printer (Name: \\KENN-PRINT1.crcsd.abc\Kenn-LIMC-1nb)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Kenn-LIMC-1nbhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesShare Path \\KENN-PRINT1.crcsd.abc\Kenn-LIMC-1nb
Set this printer as default printer False
Local Port
Shared Printer (Name: \\KENN-PRINT1.crcsd.abc\Kenn-73A-1nb)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Kenn-73A-1nbhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesShare Path \\KENN-PRINT1.crcsd.abc\Kenn-73A-1nb
Set this printer as default printer False
Local Port
Shared Printer (Name: \\KENN-PRINT1.crcsd.abc\Kenn-UIMC-1nc)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Kenn-UIMC-1nchide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesShare Path \\KENN-PRINT1.crcsd.abc\Kenn-UIMC-1nc
Set this printer as default printer False
Local Port
Shared Printer (Name: \\KENN-PRINT1.crcsd.abc\Kenn-210A-1nb)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Kenn-210A-1nbhide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesShare Path \\KENN-PRINT1.crcsd.abc\Kenn-210A-1nb
Set this printer as default printer False
Local Port
Shared Printer (Name: \\KENN-PRINT1.crcsd.abc\Kenn-64BL-1nc)hide
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.Kenn-64BL-1nchide
Winning GPO Student Mandatory
Result: SuccessGeneralhide
Action Update
PropertiesShare Path \\KENN-PRINT1.crcsd.abc\Kenn-64BL-1nc
Set this printer as default printer False
Local Port
Group Policy Objectshide
Applied GPOshide
Default Domain Policy [{31B2F340-016D-11D2-945F-00C04FB984F9}]hide
Link Location crcsd.abc
Extensions Configured Registry
{3060E8D0-7020-11D2-842D-00C04FA372D4}
Enforced No
Disabled None
Security Filters NT AUTHORITY\Authenticated Users
Revision AD (18), SYSVOL (18)
WMI Filter
Lock Games [{6B299CF0-7BD6-4D6B-865D-BBE672CC8A97}]hide
Link Location crcsd.abc/Special/Student Mandatory
Extensions Configured {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
Registry
Enforced No
Disabled None
Security Filters CRCSD\Dist Lock Games
CRCSD\Dist Lock IE
Revision AD (23), SYSVOL (23)
WMI Filter
Student Best Practices [{EB53B206-170A-41FB-8960-B67B936C8E22}]hide
Link Location crcsd.abc/Special/Student Mandatory
Extensions Configured Internet Explorer Zonemapping
Registry
Folder Redirection
Enforced No
Disabled None
Security Filters NT AUTHORITY\Authenticated Users
Revision AD (2), SYSVOL (2)
WMI Filter
Student Mandatory [{0FA26CC5-C001-4A02-AACE-930581B7A1CF}]hide
Link Location crcsd.abc/Special/Student Mandatory
Extensions Configured Group Policy Shortcuts
Group Policy Printers
Group Policy Registry
Deployed Printer Connections
Group Policy Drive Maps
Registry
Group Policy Infrastructure
Enforced No
Disabled None
Security Filters NT AUTHORITY\Authenticated Users
Revision AD (498), SYSVOL (498)
WMI Filter
Denied GPOshide
Local Group Policy [LocalGPO]hide
Link Location Local
Extensions Configured
Enforced No
Disabled None
Security Filters
Revision AD (0), SYSVOL (0)
WMI Filter
Reason Denied Empty
WMI Filtershide
Name Value Reference GPO(s)
None
Jason -
GP Deployed Printers Keep Asking fo Drivers
Hello,
My domain in Windows 2008 and for a couple of years now, I have been deploying printers through GP. I have printers that are on a print server and are deployed to computer labs. Standard users are constantly asked to update the drivers and cannot
print until they are updated. I have to sign on as a local Admin to update the drivers. But the users still get prompted. I log back in and I see the same thing. I have to update the drivers again. I just did this to an entire
lab last week and yesterday and today I had people that could not print. I deleted their profile and now they dont even have the printer listed. Why is it that they are always asking for drivers? The print server has both 32-Bit and 64-Bit
drivers installed. The workstations are Windows 7 Pro 64-Bit. One printer server is Windows Server 2003 and the other is 2008 R2.You can attempt to track down why one of the files is getting out of sync between the clients and the print server. It might just be easier to change the Point and Print Restrictions Policy so the clients can download the driver without any interaction since
one of the servers is 2003. If that was not there, just switch to Package aware print drivers and you are done.
https://social.technet.microsoft.com/Forums/windowsserver/en-US/d7da54f3-b9a9-45f0-a5bf-c83617350fd9/users-acces-to-install-printers?forum=winserverprint
You may also be impacted by missing dependent files. There have been a couple patches for the issue previously.
https://social.technet.microsoft.com/Forums/windowsserver/en-US/2944885e-618d-4a63-aba3-deb5d0552f98/print-drivers-on-windows-7-clients-missing-dependent-files?forum=winserverprint
Alan Morris formerly with Windows Printing Team -
Deploying IE10 thru Active Directory
I would like to deploy Internet Explorer 10 with all critical updates to several clients Windows 7 SP1 which have IE8 installed. Already have met with IEAK10 to configure IE10. When finished in the builds folder and subfolders there are made 2 files: IE10-Setup-Full.exe
and a .msi. I have configured IEAK10 so that the installation is not asking questions.
Is it possible to deploy that msi made with IEAK with Active Directory? Configure a gpo with startup user or startup computer so that the msi is deployed to the clients?
In this installation are there any critical updates installed automatically? I have synchronised in IEAK but if thats enough?
What would be the easyest best way to deploy IE10 thru active directory with all critical updates and without user intervention, is that like above?
freddieHi,
To deploy IE 10 to all clients, you can use SCCM to deploy IE on computers already running Windows or use MDT to deploy IE 10 as a part of Windows image, if you want to deploy it by GPO, of course you can use Group Policy Software Installation, it's recommended
to use Group Policy to deploy IE for small to medium sized organizations.
Using Software Distribution Tools to Install Internet Explorer 10
http://technet.microsoft.com/en-us/library/jj822329.aspx
Editing Software Settings (Group Policy Software Installation )
http://technet.microsoft.com/en-us/library/cc771306.aspx
And "Synchronize" option in IEAK 10 can synchronize your Internet Explorer 10 files to receive the latest updates on the web.
Yolanda Zhu
TechNet Community Support
So as i understand it: configure it with IEAK10 and the msi file created deploy thru software installation gpo is for me the beste way to go?. THe msi containes latest updates when choosing synchronise in IEAK, how can i see if
the msi holds the latest updates?
Putting IE10 in a image is for me the easest way to install ie10 in my virtual master machine. No need to put ie10 in MDT2010 because i can put it right away in a image that is goiing to be sysprepped and deployed..
freddie -
Deploying printers without Group Policy
A little background first, I work for a company with 10+ sites while only 2 sites actually are in a domain. Everyday I am getting work orders for adding a ip printers to every machine because they want to print to any printer within their location. I
understand the print services within windows server 2008 and how I can deploy them easily through group policy. The problem is the majority do not have the domain infrastructure to do this.
Which leads me to my question of, how and what would be the most painless way of deploying printers to all computers in particular subnets between sites? Create a batch file to add the printers and run it on the each workstation? Create a network share for
printers? or it is possible to force adding a new printer over the network without a group policy. Thank you all in advancescript will be an option...
http://www.computerperformance.co.uk/powershell/powershell_printers.htm
http://support.risualblogs.com/blog/2012/02/14/using-powershell-to-create-printers/
Best,
Howtodo -
My deployed printers don't appear on the computers that are part of the security group
I use the Print Management role to deploy my printers to my users.
Because I only want those printers to appear on certain laptops/servers, I deployed them using the “Per machine GPO”
I created an “Office Printers” security group that contains those laptops/servers
I use this security group to filter my GPO (under Security Filtering)
The above used to work but after modifying and adding new printers, the printers are not getting deployed anymore.
Here is what I see:
- On the laptops/servers I am connecting to (I am the Domain Admin), I can see all the printers
- On some user’s machine, no printers shows
- On some user’s machine, only the printers that were listed in GPO before the changes do show
gpresults –r shows different result:
- Mine shows: Filtering : Denied (Security) even I see the printers
- Some machines show: Filtering: Not Applied (Unknown Reason)
- Some machines don’t show the GPO at allHi,
Before posting my question, i ran gpresult /force and rebooted the machines several times.
I resolved my issue yesterday by "chance":
- since the deployment was failing using the deploy to GP feature in Print Management, I decided to try to deploy them by using directly GPMC.
- I discovered that the printer that I added few days ago was not marked as "shared" (I did not think that it was an issue because I assumed that the Print Management did not need this setting to be set). Since the others were shared, I decided to share
this one as well.
>>>> that resolved the issue: the printers appeared on all the machines as expected.
I feel that MS should look into this behavior:
- Deployment of the printers should not fail if one is not shared
- if sharing is a must to use this feature, deploying the printer from the Print Management should bring an error.
Thanks
Christophe
Maybe you are looking for
-
Can someone help with some basic answers on Premiere Elements 12
I have used Premiere Elements in the past (up to Premiere Elements 9) but only once per annum to edit the past year's video of my Grandchildren. The change now is that I am using a Panasonic HC-V520 and have been shooting in 1080 50p. Premiere Elemen
-
Adding accounts to Mac OS X 10.4.10 doesn't work?
I'm working on a donated Power Mac G4 running Mac OS X 10.4. I used Software Update to update to 10.4.10, but, after reading on this forum, I think this may be the problem. When I add a user account with System Preferences, it works fine, but then I
-
Difference on developing client applications on PC and Mac platform.
Hi, I would like to know wats the difference on developing client applications on PC and Mac platform. If i were to create software applications using Javascript, MS SQL Server 2000 and JAVA on Mac platform, would there be any difference from those w
-
White screen iPhone 3GS HELP!!
Hi, i restored my old iphone 3gs, and when it finished, i figured out the screen was totally white. it also gives me the error 29 whichi i think it is because of the baterry but with the original baterry, it still did the same (not error 29. the scre
-
Set the value of a shared secret in a custom auth class
Hello All, We are trying to use a custom authentication class to gain additional parameter to pass along in a SAML assertion to a third party vendor. We have successfully added the new custom auth class, but we are unable to determine how to assign t