[Forum FAQ] Group Policy Preferences Scheduled Tasks Item not working when the option Run whether user is logged on or not is selected

Scenario:
We use one of the following Group Policy Preferences Scheduled Tasks item to deploy a task to clients:
Computer Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Scheduled Task (At least Windows 7)
Computer Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Immediate Task (At least Windows 7)
User Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Scheduled Task (At least Windows 7)
User Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Immediate Task (At least Windows 7)
(Note that on some platforms, "At least Windows 7" is replaced with "Windows Vista and later.")
After designating a user account to run the task, we select “Run whether user is logged on or not” option, and “The Do not store password…”
check box is automatically grayed out (See Figure 1).
Figure 1
After finishing configuring the task item, on a client, we run command
gpupdate/force to forcefully update group policy. However, on the client, when we check if the task is listed in Task Scheduler snap-in, the task is not displayed, and when we run
gpresult/h report.html to collect group policy result for troubleshooting, we see an error as similar as shown in the following figure (Figure 2).
Figure 2
Cause:
To make the scheduled task run whether the user is logged on or not, we need to store the password of the designated user account. However, for the content of the scheduled
task item is stored in Sysvol where it’s not safe to store passwords, this function has been deprecated.
Workaround:
We can run the task with system account
NT Authority\System, or we can use specific user accounts to run the task when the given user is logged on. (See Figure 3)
Figure 3
Reference:
MS14-025: Vulnerability in Group Policy Preferences could allow elevation of privilege: May 13, 2014
http://support.microsoft.com/kb/2962486
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

Hello Everyone,
Succeeded !!!!!!!
Even i was struggling with this same Problem to execute a batch via Window scheduler and set the setting to "Run whether the user is logged in or not".
I tried many time but the batch runs with " Run
whether user is logged on" and not with "Run
whether user is logged on or not".
what i discovered is that there was one mapped drive
path in my batch file which was not the complete path like y:/AR.qvw actually what i did i changed that map path to the complete path like \\servnamename\d$\AR.qvw and the batch executed successfully with the setting "Run
whether user is logged on or not"
The
conclusion is that check the dependency of the script on external resources because when you check this option "Run
whether user is logged on or not" It actually conflicts. This my discovery.
If
you have any question write me on [email protected]
Thanks
& Regards,
Arun

Similar Messages

  • Task Scheduler wont run when set to "Run whether user is logged on or not"

    Hi
    I have two 2008 R2 servers with the same task and pretty much the same powershell script the schedule is running.  The powershell just runs a daily snapshot of the server.  One server it runs fine with  "Run whether user is logged on
    or not" selected.  But when selected on the second server it won't run.  I mean, the schedule says its run, but the poweshell doesn't launch and do its job.  Everything is the same on each server apart from what is being snapshotted. 
    Even the location of where the snapshot is going is the same.  Same domain account, same password.  When I change it to "Run only....." it runs fine.  But the server may not be logged in all the time, so I need it to run whatever.
    Any help would be greatly appreciated.
    Thanks
    Matt 

    I'd check in the windows system and application event logs. Also check the task log.
    Event Viewer\Applications\Microsoft\Windows\TaskScheduler\Operational
    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]
    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

  • Task Scheduler Security Option - Run if user is logged in or not

    using Windows Server 208 R2 Terminal Server - Running .NET 4.0 programs
    We are running .NET 4.0 Windows Forms programs using Task Scheduler with the Security Option - Run whether user is logged in or not.
    When the Task Scheduler starts these jobs they either not not run or they fail.
    Questions:
    1. What shell is used by Task Scheduler with the setting "run whether user is logged in or not" ?
    2. Is there some way to detect this shell or environment in a .NET program?
    I am trying to determine if I can modify the .NET programs so they will run in this shell with no errors.
    Thank you
    MisterT99

    Hi Mister,
    In addition, Since you need to launch a GUI application through Task Scheduler, so this task also need to run interactively.
    However, if the item "Run whether user is logged on or not" is selected, tasks will not run interactively, so we need to select the "Run only when user is logged".
    I recommend you can change the item "Change user or group" in security option and add a group, which will make sure your application will run interactively for all users in the group when the users logon.
    If there is anything else regarding this issue, please feel free to post back.
    If you have any feedback on our support, please click here.
    Best Regards,
    Anna Wang
    TechNet Community Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • [Forum FAQ] Why does Office 2013 cost more network flow when the application starts by default?

    Recently, we’ve heard that our customers encounter high network traffic since they large-scalely deploy Office 365/2013 within the domain/site. Does this behavior relate to the new Office? Or does Office 365/2013 cost more network resources in this case?
    To troubleshoot this, we consider to analyze what happened during the process by Network Monitor tool. 
    Start a new capture first and launch Office Word 2013, get the following things as the screenshots:
    According to the information above,
    in addition to the network authentication flow, we could notice that the Word.exe would download a lot of PNG files from the link “/en-us/templates”. What about those PNG files?
    Let us try to directly visit them via IE:
    http://office.microsoft.com/en-us/templates/TM103463086.png?ts=AOLhIeGIzwg
    Beyond question, they are the thumbnails of the Office template which are downloaded while the Office application starts by default.

    In
    some certain circumstances,
    we might disable it by Office option or Group policy.
    Disable Start Screen by Office 2103 UI:
    Open Office 2013 application, go to File in Ribbon > Options tab > General page > under the section of Start Screen options, uncheck the options "Show the
    Start screen when this application starts"
    Disable Start Screen by Registry key:
    HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Common\General
    DisableBootToOfficeStart (DWORD): set the value
    to 1
    Disable Start Screen by Group Policy:
    Disable Start Screen by OCT:
    That's all. If you have any questions or concerns about this topic, feel free to post here.
    Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

  • How can i navigate system preferences if trackpad is not working  somehow the option were unchecked

    How can i navigate system preferences if trackpad is not working? 
    Somehow the first couple of trackpad functions were unchecked and since they are not operational I can't click or tap to turn them back on.
    I've tried shutting down and restarting and holding my hand on the trackpad for 3-4 sec. then sliding it off (another post had this suggestions).
    I don't use the function keys at all to navigate the computer so I am at a total loss if the trackpad does not work.

    Thanks for the response.
    Unfortunately this did not work - the tap to click is still not checked - and the tap function does not work.
    I did try it twice - and even used a stopwatch to be sure I got the time right.
    I noticed there is also an instruction to reset PRAM (was with the SMC reset instructions).  Is that something that may help?

  • Group Policy Preferences

    I'm interested in applying group policy preferences to our new Windows 7 machines, partly to simplify my image-building process, via Zen 10 (soon Zen 11). However, I understand that these are not available through the Local Group Policy editor- so my question is, does anybody know how we could produce a set of Group Policy preference settings to deploy via Zen, without the presence of Active Directory?

    Make sure this option is not set on the policy in the ZCC.
    "After enforcement, force a re-login on the managed device, if necessary"
    On 5/24/2011 9:36 AM, jfansell wrote:
    >
    > Thanks- I was hoping to be able to utilise something that already
    > existed rather than using custom adm files- but we are now looking into
    > doing it that way now. Incidentally we do have a purely for testing AD
    > environment in which I created a test policy containing preferences, and
    > imported this into ZCM 10, still no joy even though the policy
    > preferences files appeared at the workstation (under
    > c:\Windows\System32\grouppolicy\...) they just weren't effective.
    > Presumably this is somehow a limitation of our environment (the AD is
    > completely disconnected from the users and workstations). It would be
    > nice if somehow the preferences were replicated in ZCM in the future.
    >
    >
    Craig Wilson - MCNE, MCSE, CCNA
    Novell Knowledge Partner
    Novell does not officially monitor these forums.
    Suggestions/Opinions/Statements made by me are solely my own.
    These thoughts may not be shared by either Novell or any rational human.

  • Proxy details keep deleting from field in Group Policy Preferences for IE 10 on windows 7 and 8

    We have a lot of users who on the last update and have seemed to manage to install IE 10 onto their windows 7 machines as now causing all sorts of issues. I know that IEM has been replaced in favour of Group Policy Preferences and I have build a windows
    8 machine just to create a group policy preference as you are unable to create the preferences from windows 7, thank you Microsoft!
    I have created a test OU and got a win 7 and a win 8 machine both with IE 10 for testing. I have created the preference settings, home page etc and disabled using the F keys the advanced features that we do not require as from reading in other post even
    if it is not ticked, if it is green then it will apply it, kinda defeats the using the tick but it is what it is!
    When we do a gpupdate it picks up the default homepage as well as other settings but the proxy settings is blank. I then went back into the preferences I created for IE 10 and checked the connections, LAN settings and the proxy server name is missing but
    both ticks are showing for the proxy settings and when you click on advanced it shows the proxy server and port details fine. I have been working on this now for 4 days and getting no where to a point were we just roll back any users on IE 10 back to IE 9.
    I have also unlinked any other gpo relating to Internet settings on the test OU just in case there are conflicts. Any ideas as where to go from here?

    In the end to get around the proxy settings I had to create a registry key preference with proxy and port details which seemed to have done the trick and now IE 10 is picking up the proxy details and displaying webpages

  • How can I setup a scheduled task to run a Powershell Script delivered as a Group Policy Preference

    I have a Powershell script I want to run only once when a user logs onto their system. This script would move all the PST files from the Local drive and the Home drive to a folder location within the users profile. I wanted to run this as a Windows 7 Scheduled Task using Group Policy Preferences. How can I get this to happen short of a logon script? I have updated all the machines to WMF 4.0 so could I use a Scheduled Job instead? I wanted to run the script as the logon user but elevated.#Start Outlook and Disconnect attached PST files.
    $Outlook = New-Object -ComObject Outlook.Application
    $namespace = $outlook.getnamespace("MAPI")
    $folder = $namespace.GetDefaultFolder("olFolderInbox")
    $explorer = $folder.GetExplorer()
    $explorer.Display()
    $myArray= @()
    $outlook.Session.Stores | where{ ($_.FilePath -like'*.PST') } | foreach{[array]$myArray+= $_.FilePath}
    for
    ($x=0;$x-le$myArray.length-1;$x++)
    $PSTPath= $myArray[$x]
    $PST= $namespace.Stores | ?{$_.FilePath -like$PSTPath}
    $PSTRoot= $PST.GetRootFolder() #Get Root Folder name of PST
    $PSTFolder= $Namespace.Folders.Item($PSTRoot.Name) #Bind to PST for disconnection
    $Namespace.GetType().InvokeMember('RemoveStore',[System.Reflection.BindingFlags]::InvokeMethod,$null,$Namespace,($PSTFolder)) #Disconnect .PST
    #Move All PST files to the default location while deleting the PST files from their original location.
    $SourceList = ("$env:SystemDrive", "$env:HOMEDRIVE")
    $Destination = ("$env:USERPROFILE\MyOutlookFiles")
    (Get-ChildItem -Path $SourceList -Recurse -Filter *.PST) | Move-Item -Destination $Destination
    #Attach all PST files from the default location.
    Add-type -assembly "Microsoft.Office.Interop.Outlook" | out-null
    $outlook = new-object -comobject outlook.application
    $namespace = $outlook.GetNameSpace("MAPI")
    dir “$env:USERPROFILE\MyOutlookFiles\*.pst” | % { $namespace.AddStore($_.FullName) }

    Mike,
    I do not understand what appears to be a regular expression above. I did add the PowerShell script to the HKCU RunOnce Key as suggested.
    Windows Registry Editor Version 5.00
    C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe -noprofile -sta -WindowStyle Hidden -ExecutionPolicy RemoteSigned -File "C:\scripts\Windows PowerShell\Move-PST.ps1"
     I'm delivering this using Group Policy Preferences. It seems to fail or time out when run because the behavior is different if I run the script from within the PowerShell IDE. I added the parameters to the script and will try it again in the morning.

  • Windows 2008 R2 - Group Policy Preference - folder option "Open with" Access denied

    Similar to this post:
    social.technet.microsoft.com/Forums/en-US/d42a81bc-96de-4af3-bc41-079e88e6ea4a
    We have Citrix terminal servers running Windows 2008 R2 and attempting to force PDF files to open with Acrobat versus PDF editing software we have installed for a small subset of users.  So I created a Group Policy Preference and added a OpenWith item
    to the Folder Options to use Acrobat as the default and linked it to a Users OU.  However, if I run gpresult the OpenWith setting fails with error code 0x80070005.  You can change it to not run in the user's security context which eliminates the
    error but then it won't actually do anything.
    The problem seems to be that when a user sets another program as their default via Windows Explorer the permissions on HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoice get changed so that the user is specifically
    denied the ability to set that key.  Remove the special permissions added and the group policy succeeds and changes it back to the default ... until the user changes it back (intentionally or otherwise) and the permissions are changed again.
    Any ideas here?

    > Any ideas here?
    We use GPP Registry to achieve this goal, so we do not run into that
    issue (we unchecked "run in users context", so privs are not an issue)
    But I agree, this really should work as intended...
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • Registry Wizard not saving selections in Group Policy Preferences.

    Hello,
    I am trying to set registry keys for ODBC settings using Group Policy Preferences. All PC's in the domain are Windows 7. In testing, I was able to get this to work. Now that I am trying to create it for production, I am unable to get it to work.
    I am using the same PC to create for production that I used when I was testing.
    The steps I am taking are as follows:
    Create a new GPO. Edit the GPO and navigate to the registry node under Computer Configuration, Preferences where I create a new Collection Item. I then right click the new collection item and choose New - Registry Wizard. Using Local Computer,
    I navigate to [HKLM] > Software > Wow6432Node > ODBC > ODBC.ini
    Under the ODBC.ini key are all of the keys and data I want to include in my policy. When I check each key and put a check mark beside each data item in the lower window, my selections in the lower window are not being saved. The check mark
    shows up at the time but they are gone if I go back to check my work before hitting the finish button. If I go ahead and finish the policy anyway, I only get the keys, not the data items when the GPO is applied.
    I have found a work around but it is very cumbersome and isn't a good long term solution. The work around is to go ahead and create the policy, then go back into the collection and expand everything on the left and add each data value to each key one at
    a time using the All Tasks > Add - menu item.
    Any ideas why this is happening? I should also mention when I was "testing", I was hitting the same domain controller as I am when trying to build this for my "production" policy.
    Thanks in advance.

    Hello,
    Thanks for your reply. I am waiting on my account to be verified before I can post a screen shot.
    I did discover that if I go through and click on all the data items more than once, it appears to work. Basically, I went through each key and checked the data items, then went back to the top and started over again. All of the checks were gone, so I checked
    them again and clicked finish. I don't know if they were still missing but checking them twice seems to have worked.
    I can replicate the issue if I only check them once.

  • Group Policy Preference Power Plan "Blocked By Group Policy"

    I noticed this error in the application event log of a Windows 7 PC:
    Log Name:      Application
    Source:        Group Policy Power Options
    Date:          3/21/2013 3:19:42 AM
    Event ID:      4098
    Task Category: (2)
    Level:         Warning
    Keywords:      Classic
    User:          SYSTEM
    Computer:      xxx
    Description:
    The computer 'Power Plan (Windows Vista and later)' preference item in the 'Windows 7 Desktop Power Plan {A078F08F-45CC-4209-A264-FE0CB5635A99}' Group Policy object did not apply because it failed with error code '0x800704ec This program is blocked by group
    policy. For more information, contact your system administrator.' This error was suppressed.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Group Policy Power Options" />
        <EventID Qualifiers="34305">4098</EventID>
        <Level>3</Level>
        <Task>2</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2013-03-21T10:19:42.000000000Z" />
        <EventRecordID>7687</EventRecordID>
        <Channel>Application</Channel>
        <Computer>xx</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data>computer</Data>
        <Data>Power Plan (Windows Vista and later)</Data>
        <Data>Windows 7 Desktop Power Plan {A078F08F-45CC-4209-A264-FE0CB5635A99}</Data>
        <Data>0x800704ec This program is blocked by group policy. For more information, contact your system administrator.</Data>
      </EventData>
    </Event>
    How can I find out exactly why it is not working?  "Blocked by group policy" is not specific enough.

    Hi,
    You can also enable GPP tracing and logging for more information:
    Computer Configuration\Policies\Administrative Templates\System\Group Policy\Configure Power Options preference logging and tracing
    http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx
    Regards,
    Cicely
    There is no such option "Configure Power Options preference logging and tracing" at Computer
    Configuration\Policies\Administrative Templates\System\Group Policy\.
    It alphabetical order Always use local ADM files ... is followed by Disallow interactive users from generating ...  Not

  • Group Policy "Restricted Groups" (local groups) using group policy preferences

    I was recently tasked a solution with creating a group policy to manage RDP user access to a set of Active Directory computer objects.
    Part of the  solution was to create a policy so that this would only apply a specific security group(users) to a specific set of Active Directory computer objects within the OU to which it was applied so that other machines
    and/or user accounts in this OU remain un affected by this policy.
    The policy was to be able to include multiple sets of Security groups(users) for the associated machines isolating those security groups(users) to only their sets of Active Directory computer objects.
     Reduce the requirement to create multiple group policies to apply different "Local Group"/"Restricted groups" management for computer objects in the domain.
    I thouhgt about using System based policies and creating different WMI filters to target sets of AD Computer objects, but came to the conclusion this would not help due to the limited of WMI quries I would be able to create for a standard
    Image.
    So I then thought about group policy preferences and came up with the solution
    I created a new Group policy and created a new item for the local group, in this instance but not limited to "Remote Desktop users (built-in)" and added the security group(users).  In my case I did not need to use the "delete
    all member users" or "delete all member groups" as I wanted other groups in this local group for the computer objects to remain intact.
    Then what I did is set the "item-level-target" setting from "the common tab" on the GPP and set it to the security group which containd the AD computer objects the user accounts required access to.  I then did a couple of standard
    tests to confirm the local security group(users) appeared only on the machine in the item level target security group and applied to no other machines in the outside of SOM. 
    So with this in place, if I needed to create any other entries for different groups and access to specific machines all I need to do is create a new GPP item within this policy.
    Being mindful that system policies settings if applied to same OU will take preceedence over GPP settings.... 
    Thought I would just share this in-case anyone else has had similar requests/thoughts and or has other methods that they have used that they would like to share. 
    I am not sure either on the limit of entries that GPP have either so if anyone does know please post and possible links? 
    I have struggled to find an answer, however it could be that I am not asking the right question!

    good sharing...
    Best,
    Howtodo

  • Group policy preference for creating printers setting the wrong printer as default

    Hi
    We have a a group policy preference applied to users.  At the moment we create a shared printer and set it as default for all users in a specific OU.  Now we need to add another shared printer.  I have updated the policy and set it to create
    the new shared printer and have set item level targeting to the same OU as the first printer.  I want to keep the existing printer as the default, however when the policy runs, the new printer is created fine but it is set as the default
    printer.  Is this because it has been added last ?  There doesn't seem to be a way of changing the order that the printers are applied.
    Both printers are Shared printers and are set to Create
    The existing printer (printer A) is set as the default printer.  It is targeted at the London OU.
    The new printer (printer B) has NOT been set as default.  It is targeted at the London OU.
    No other options have been set.
    When the policy is applied both printers are added but printer B is being set as the default.
    Any help would be appreciated.
    Thanks
    G

    Hi G,
    >>however when the policy runs, the new printer is created fine but it is set as the default printer.  Is this because it has been added last ?  There doesn't seem to be a way of changing the order that the printers are applied.
    Before going further, what's the operating systems of our clients? Here, I need to double confirm that the checkbox of
    Set this printer as the default printer... is not selected in the new GPP Printer item. Besides, we can change the orders of the printer items. To do this, select the printer item, right click, click All Tasks, and choose Move Up or Move
    Down to change the order.
    Best regards,
    Frank Shen
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Extreme slow login on Server 2008 R2 TS at Group Policy Preferences - Printers

    I see references to this problem everywhere, going back to 2010.  However I'm not finding any real answers.
    I have Group Policy Preferences installing printers to Terminal Server Users.  I have one policy that applies to 4 terminal servers.  One of them is a 2008 R2, the others are 2003 x64.  Only for the 2008 R2 server, after all of the printers
    show (in event viewer) as successfully loaded, there is a long hang.  I have many printers applied to me, and that results in my load time being the longest of all at about 3 minutes.  I am an administrator on the machine.  Others have the exact
    same problem, just a bit less pronounced depending on the number of printers. 
    The policy preference is set to UPDATE, so it's not loading the driver... again, the printer is already successfully applied.
    I've tried setting UAC to "Never" on the server.  No effect.  I've played with the Point and Print policy at both computer and user level, finally just setting both to disabled, but prior to that setting them to Enabled with the "do
    not show warning" on both settings.  No effect (which makes sense since that is for non-admins and I am having this problem as an admin).
    My logging pasted below shows this same thing in all cases.
    Is there an answer to this that I am just not finding?
    2013-12-06 09:11:44.133 [pid=0x388,tid=0xca0] Filters passed.
    2013-12-06 09:11:44.133 [pid=0x388,tid=0xca0] Adding child elements to RSOP.
    2013-12-06 09:11:44.133 [pid=0x388,tid=0xca0] Set user security context.
    2013-12-06 09:11:44.289 [pid=0x388,tid=0xca0] Set system security context.
    2013-12-06 09:14:13.873 [pid=0x388,tid=0xca0] Set user security context.
    2013-12-06 09:14:13.909 [pid=0x388,tid=0xca0] Set system security context.
    2013-12-06 09:14:13.909 [pid=0x388,tid=0xca0] Properties handled.
    2013-12-06 09:14:13.909 [pid=0x388,tid=0xca0] RunOnce value created [SUCCEEDED(S_FALSE)]

    Hi,
    Based on your description, I want to confirm whether we have used Item-level Targeting of GPP for printer deploying.
    GP Preferences settings that use Item- Level Targeting (ILT) are not inherently harmful. However, certain kinds of Item Level Targeting queries can
    take more time to run.
    Regarding this issue, the following article can be referred to for more information and the hotfix in the article can be downloaded to fix the issue.
    You experience a long domain logon time in Windows Vista, Windows 7, Windows Server 2008 or Windows Server 2008 R2 after you deploy Group Policy preferences
    to the computer
    http://support.microsoft.com/kb/2561285/en-us
    In addition, regarding group policy and logon impact, the following article can be referred to for more information.
    Group Policy and Logon Impact
    http://blogs.technet.com/b/grouppolicy/archive/2013/05/23/group-policy-and-logon-impact.aspx
    Best regards,
    Frank Shen

  • Does using Group Policy Preferences to deploy printers require the print driver to be pre-installed?

    I'm trying to prepare our school system for Windows 7 (we currently use XP).  I would like to use the new Group Policy Preferences method of deploying printers.  I pushed out the XP client side extensions through WSUS.  In my test environment, I added the shared printer in group policy preferences.  My XP machine had the printers show up automatically, but my Windows 7 machine did not.  I realized that I had previously connected a printer of the same type to my XP machine before and the drivers were already installed.  To test this theory, I manually connected the shared printers to the Windows 7 machine, deleted them, then logged off and back on.  Now the printers are showing up from group policy.  My question is does using group policy preferences to deploy printers require the print driver to be pre-installed?  If not, then what am I doing wrong?  If so, is there a way to work around this?  Thanks for your help.
    EDIT:  To clarify, I am using the share method in GPP.  This is the error message I get in the event log:
    The user 'PRINTERNAME' preference item in the 'win7 printer test {946461A1-27F8-406F-A0B3-0A1A05AF34F6}' Group Policy object did not apply because it failed with error code '0x80070bcb The specified printer driver was not found on the system and needs to be downloaded.' This error was suppressed.

    This link have a description of resolution:
    http://technet.microsoft.com/en-us/library/cc725938.aspx
    Open the GPMC.
    Open the GPO where the printer connections are deployed, and navigate to Computer Configuration, Policies, Administrative Templates, Control
    Panel, and thenPrinters.
    Note
    The Point and Print Restrictions setting can also be found under User Configuration\Policies\Administrative Templates\Control Panel\Printers.
    This policy is ignored by Windows 7 and Windows Server 2008 R2, but is enforced by earlier editions of Windows including Windows XP with SP1, Windows Server 2003 with SP1, and Windows Server 2008. We recommend that you change
    this policy setting in both locations so that all down-level clients have a consistent experience.
    Right-click Point and Print Restrictions, and then click Properties.
    Click Enabled.
    Clear the following check boxes:
    Users can only point and print to these servers 
    Users can only point and print to machines in their forest 
    In the When installing drivers for a new connection box, select Do not show warning or elevation prompt.
    Scroll down, and in the When updating drivers for an existing connection box, select Show warning only.
    Click OK.

Maybe you are looking for

  • Macbook pro 2014 with ASUS PB287Q and SAMSUNG U28D590D

    Hi I was wondering if my new macbook pro 15" 2014 2.5GHz Quad-core Intel Core i7 16GB 1600MHz DDR3L SDRAM 512GB Flash Storage Intel Iris Pro Graphics+Nvidia GT750m 2GB will work with the ASUS PB287Q 4K or the samsung U28D590D? I read that if u connec

  • Is iTunes the worst software ever!!!!

    I have just purchased a new iPod shuffle, the new tiny one, which looks great and does the job. BUT the iTunes software is absoulte PANTS. Yes its that bad i used capital letters. Why cant they make it like Microsoft software where you can drag and d

  • How to turn off picture frame without enabling pass code?

    Any advice? Thanks.

  • Profit center Group

    Hi iam working on a report to list all open customer invoices. I need to list them with respect to profit center group. I have the profit center.Pls help me how to find profit center group for that profit center.Hierarchy is the top node. Thanks.

  • Did 10.6.5 alter the permissions of the top level of the startup volume?

    Since applying the 10.6.5 update it seems that non-admin users have read/write access to the top level directory of the startup volume. That means that non-admin users can create items there. I am wondeing if this is a normal change for 10.6.5 or if