MS Update Blocking Group Policy Printing

Hello all,
My tech team ran 6-months of updates in computer labs for our community college. The computer labs are under group policies for printer, drive mapping, and other policies that are pushed down to the workstations. These are locked workstations (Faronics DeepFreeze)
hence there were 6-months of updates.
Since those updates were ran, the workstations cannot print to the printers. The group policies still work has the printer and drive mappings are present. I can open documents from the shares. However, you send a print job and it disappears. Try to print
a test page and get a message stating it has failed. The MS troubleshooter does swat.
My network admin is able to print a test page from the server. I tried unjoining and then rejoin the domain, but nothing. I tried System Restore, but it hosed the workstation (blue screen). Safe Mode and Repair did not do a thing.
I know it is the updates because we found a PC that the updates were not ran. It is in a lab that cannot print. I tested it and it can print.
I am resorting to running one Windows update at a time. But there is no guarantee that it will resolve this issue.
Anyone experienced this issue or have advice? Your input would be greatly appreciated.

Hi,
What is the detailed message you received when you send a print job?
What updates caused this problem?
I recommend you to uninstall and reinstall this printer driver to check if you still have this issue.
Thanks!
Andy Altmann
TechNet Community Support

Similar Messages

  • Windows 8.1 mandatory profile Group Policy printer problems

    We're a school district that is using mandatory profiles for the students. We use both Win 7 and Win 8.1 on the workstations. We're having a problem with group policy printer deployment on just the Windows 8 Workstations. I've tried using both the deployment
    method in policies and the Preferences with Item level targeting and on the windows 8 ones its always intermittent. Sometimes you login and get the printers or some of them and sometimes not. Other times if you log out and back on etc. I've been troubleshooting
    this for a week and have found with Win 7 it seems to always work but on our Win 8.1 ones about 50/50. The error in the Event log for that printer is this.
    Group Policy Object did not apply because it failed with error code '0x80070057 The parameter is incorrect.' This error was suppressed.
    What I've found that if I create a test account that does not use the mandatory profile the printers always map. Even on Windows 8.1. So far thats the only commonality. Can anyone tel me what I can look at with this. If they never worked that would be an
    easier problem but its not consistent.
    Thanks
    Jason

    Hi Jason, Did you ever find a fix for this as we are having exactly the same problem only with windows 8.1 computers using mandatory profiles and it's driving me mad. Any help would be much appreciated Thanks Dan

  • Block Patch KB3002657 from installing/being available via Windows Update via Group Policy

    Hi Everyone,
    Been hearing a lot of issues around with KB3002657 causing Authentication issues. We've recently appeared to have similar issues. I'm currently getting out SCCM guru's to run
    an inventory on our environment to review if we have had this deployed to our environment, either by Windows Update (manual), SCCM/Wsus etc. If we do we're looking to have this removed and not deployed via our normal mechanisms to stop any production outages.
    I would like to see if it is possible to block/hide this update from being visible from Windows Update, possibly by Group Policy.
    From memory Microsoft created specifc ADM templates for blocking updated for Internet Explorer version to assist with the same type of issues (i.e. to stop IE from being updated
    via Automatic Updates). Would there by anything like this available for this update, or does anyone know of another way (specifc Registry settings or ADM files that could be edited) to achieve this?
    Thanks in advance.
    Simon

    Please, see solution:
    The V2 release of MS15-027 / KB 3002657 that resolves NTLM v2
    authentication failures by Windows Server 2003 DCs is available: 
    The X86 version is at http://www.microsoft.com/en-us/download/details.aspx?id=46147
    The ia64 version is at: http://www.microsoft.com/en-us/download/details.aspx?id=46204
    The amd64 is at: http://www.microsoft.com/en-us/download/details.aspx?id=46054
    Best Regards, Andrei ...
    Microsoft Certified Professional

  • Group policy printer settings

    When using Group policy computer configuration control panel settings \printers you can specifiy both an IP address port and a path to the print server.  Are these connections for local TCP\IP printers or for network print server printers.  I am
    not sure why I would have to specify path to server if they were local TCP\IP printers or vice\versa(specify IP address if they are only network printers).

    The best spot for Group Policy Preferences questions is in the Group Policy forum
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverGP&filter=alltypes&sort=lastpostdesc
    However, since they included this print related setting I do know what you are asking about.
    The share is used to get the print driver installed on the client for adding the local printer.  This will not work if you use type 4 print drivers since the drivers are not downloaded to the clients and the GPP printing scenario falls apart here.
    I totally agree with you that this is confusing, however, as a print server admin, what I would do is create one share for each print driver that you need to install on the clients.  If you have 80 printers that can use the same driver, create one share
    and just update the GPP data with the IP for the specific device.
    I would not use a print server to act as a software distribution point if the number of clients on your network is less than 100.  Setup a Win7 or Win8 machine with the shares. 
    Alan Morris Windows Printing Team

  • Automatic Windows Update via Group Policy in Windows 8

    Hi,
    I have created a new GPO to place some settings on the Automatic Update to all my client pcs. The settings applied as the image i uploaded below. The problem is that this GPO were successfully applied to all my Windows 7 machine but not Windows 8.1 machines.
    Is there anything that i missed or i should know about Windows 8.1 automatic update configuration via Group Policy?. I've tried to google but cant find any guidance that relates. I'm not using WSUS. Appreciates any advise. Thanks.
    Cheers, Sparcx [MCTS,MCITP-EA]

    Hi Leon, yes i have read the blog that you gave, It says that Windows 8 requires a KB update to roll the changes that will solve this issue. However its also said that the update is included in Windows 8.1 and there's no need to update to solve the Automatic
    Update behaviour via Group Policy as mentioned. Also tried to apply the KB update suggested, but failed. It is not for Windows 8.1 platform. Is there any other suggestion? I kinda stuck here..
    Cheers, Sparcx [MCTS,MCITP-EA]

  • Group Policy Printer Error

    I am getting the following warning in my Application Log:
    Code Snippet
    The user '<Printer Name>' preference item in the 'Default Domain Policy {31B2F340-016D-11D2-945F-00C04FB984F9}' Group Policy object did not apply because it failed with error code '0x8007007b The filename, directory name, or volume label syntax is incorrect.' This error was suppressed.
    This fires off about every 1.5 hours.  Is there a way to root out and stop this warning?
    Thanks!

    It is being reapplied through background refresh, which happens about every 90 minutes.  Remove the printer mapping from your Default Domain Policy and you'll stop getting the error message.

  • Uninstall a windows update usign group policy

    Hi !
    Recently I installed Service Pack 1 for windows server 2008 R2 and after that i lost RDP to it.
    Investigated it and found a security update is the cause.
    I connected using iLo and uninstalled it and all went ok
    so here is what i want
    is there anyway to uninstall a windows update from different clients using group policy or WSUS ?

    Hi,
    On Group Policy Management Console, Go to GPO that will contain the script and go to Computer Configuration > Policies > Windows Settings > Scripts (Start up/Shutdown)
    Click Add and then Browse. This will open the GPO in the Sysvol share for you to create the batch file.Add Shutdown
    script
     use Shutdown scripts when you need to remove an update which creates issue.
    Note: updates may require a reboot after removal. By using a Shutdown script, the script can run at the next system shutdown/reboot event and the update removal process gets the reboot it needs.
    By using a Startup script, you may end up needing two reboots to remove the update: one reboot so that the script runs at the next system start and a possible second reboot if the update removal process requires it.
    Use the below script by replacing the you own KB that needs to be kicked from servers.
    Make below .bat
    C:\Windows\System32\wusa.exe/uninstall/kb:example12345555/quiet/norestart/log
    By adding the optional, /log, you can go into the Setup Event Log and check that your update was removed.
    Event Log- Windows update was successfully uninstalled
    Regards
    Raj
    ADS/DNS/DHCP/RIS/GROUP POLICY/PowerShell/VMware/Esxi/Storage.

  • Software Updates Failing - Group Policy Overwritten - Server and Policy NOT CONFIGURED

    I have seen a few posts about this issue and group policy overwriting the settings needed by SCCM with the wrong WSUS server. I checked the wuahandlerlog and found this error but it didnt have the server information.
    "Group policy settings were overwritten by a higher authority (Domain Controller) to: Server  and Policy NOT CONFIGURED"
    The only coputer policy that applies to this system does not have WSUS entries in it.  Windows update runs ok, and I deleted the WSUS registry keys that were set by a script and reinstall the client still getting the same error. I dont see any GPO local or domain, or reg keys that are setting anything. I have 10 other servers is the same AD container that this is working perfecly on.......
    Suggestions????

    Check out this GPO:
    Computer Configuration -> Administrative Templates -> System -> Group Policy: 
    "Turn off Local Group Policy Objects processing"
    The help text:
    "This policy setting prevents Local Group Policy Objects (Local GPOs) from being applied.
    By default, the policy settings in Local GPOs are applied before any domain-based GPO policy settings. These policy settings can apply to both users and the local computer. You can disable the processing and application of all Local GPOs to ensure that only
    domain-based GPOs are applied.
    If you enable this policy setting, the system does not process and apply any Local GPOs.
    If you disable or do not configure this policy setting, Local GPOs continue to be applied.
    Note: For computers joined to a domain, it is strongly recommended that you only configure this policy setting  in domain-based GPOs. This policy setting will be ignored on computers that are joined to a workgroup."
    Rolf Lidvall, Swedish Radio (Ltd)

  • Disabling windows update via group policy

    hi,
    i would like to disable automatic windows upate via group policy on windows server 2008. is it possible?
    thanks.
    sundeep

    hi,
    disabling the automatic update is not a recommended practice, but here are the steps,
    Click Start, and then click
    Run.
    Type gpedit.msc, and then click
    OK.
    Expand Computer Configuration.
    Right-click Administrative Templates, and then click
    Add/Remove Templates.
    Click Add, click
    Wuau.admin the Windows\Inf folder, and then click Open.
    Click Close.
    Under Computer Configuration, expand
    Administrative Templates, expand Windows Components, and then expand Windows Update.
    The Configure Automatic Updatespolicy appears. This policy specifies whether the computer receives security updates and other important downloads through the Windows Automatic Updates feature. The settings for this policy let you specify if
    automatic updates are enabled on the computer. If the service is enabled, you must select one of the three configuration options.
    To view the policy settings, double-click the
    Configure Automatic Updatespolicy.
    To turn on Automatic Updates, click
    Enabled or to turn off select
    Disabled
    hope this helps
    thanks

  • Group Policy Printer Error (0x80070005 Access Denied)

    I am trying the deploy two network printers via group policy using Server 2008 R2 SP1. I created the GPO and added the printers from our print server under computer configuration so that it will apply to the computers, not just the users. After a computer in
    the correct OU Gpupdates I recieve the following error in it's application event log:
    WARNING: GROUP POLICY PRINTERS
    Group Policy object did not apply because it failed with error code 0x80070005 Access is Denied. This error was suppresed.
    Any suggestions or thoughts are appreciated. I have been dealing with this error and trying the figure it out for awhile now. 

    Hi,
    This issue mostly can be caused due to the incorrect permission settings.
    Please try to perform the troubleshooting steps the following Microsoft TechNet blog provides.
    Group Policies and Access Denied
    http://blogs.technet.com/b/matthewms/archive/2005/10/29/413275.aspx
    Regards,
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Error while updating Group Policy

    Hello All,
    I get the below error while updating the group policy on the user machin.
    C:\Users\905288>gpupdate /force
    Updating Policy...
    User Policy update has completed successfully.
    The following warnings were encountered during user policy processing:
    Windows failed to apply the Internet Explorer Zonemapping settings. Internet Exp
    lorer Zonemapping settings might have its own log file. Please click on the "Mor
    e information" link.
    Computer Policy update has completed successfully.
    For more detailed information, review the event log or run GPRESULT /H GPReport.
    html from the command line to access information about Group Policy results.
    Is there a way I can find which group policy is causing this issue?

    > Do you want me to give you those site details as well?
    Hm - not really, I have no error with zone assignments. It's you with
    the error :)
    Verify your site entries against
    http://support.microsoft.com/kb/184456
    - most probably, some of them do not adhere to the allowed wildcard rules.
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • Installing Adobe Flash Player via microsoft Group Policy

    I created two MSI files as recommended by Adobe and install the flash player updates through Group Policy. I have it setup so that the MSI files get published in windows 7 program/features. so when people are on the VPN they can install it manually. When they click on the application, they get an error saying you must have administrative priviliedges to install adobe flash player 12.
    There is something in the MSI file stopping it from installing as if you publish it in Program/Features via Group Policy it should allow them to install it without administrative rights as they can install Java software with no issues.ny assistan
    Any assistance with this would be greatly appreciated.

    Win2012, like Win 8, has Flash Player embedded into IE by Microsoft. The ActiveX plugin cannot be installed from any download here. There is a Windows Update KB patch and two registry keys that prevent it. Unless you manually remove those, the only way to do anything with Flash Player ActiveX for Win8 or Win2012 is through Windows Update.
    Those losers in Redmond (or India) only told you to get it fixed here because they REFUSE to accept responsibility for the gabrage browser they shoved down everyone's throats with IE11.
    If you're in a corporate environment and cannot use another browser, then the best you can do is repair IE (http://support.microsoft.com/kb/318378) and run Windows update again.
    If you need the "standalone" Flash Player Projector, it's here: Download the Windows Flash Player 13 Projector
    If you need the plug-in for other browsers, it's here: Flash Player Plug-in (All other browsers)
    But there is no updating the ActiveX plug-in from here, in spite of what Microsoft told you.

  • Windows failed to apply the Group Policy Printers settings

    Windows failed to apply the Group Policy Printers settings. Group Policy Printer
    s settings might have its own log file.
    only when I edit any setting on preferences at computer or users.  
    Ahmed Zidan Network Administrator

    Hi Ahmed,
    >>Windows failed to apply the Group Policy Printers settings. Group Policy Printer
    >>s settings might have its own log file.
    Were we using GPP Printer extension to deploy printers? Did we deploy printers to user accounts or computer accounts? Besides,what printer did we depoly via GPP, local printer, share printer, or TCP/IP printer? Here, we can check event
    logs in Event Viewer to see if more information regarding this issue can be found. Besides, we can also run command
    gpresult/h gpreport.html to further check how group policy settings were applied. If necessary, we can enable GPP Printer debug logging for troubleshooting the issue.
    To enable GPP Printer debug logging, we need to enable the following setting:
    Computer Configuration > Policies > Administrative Templates > System > Group Policy > Logging and Tracing>Configure printer preferences logging and tracing
    Regarding how to enable GPP debug logging, the following article can be referred to for more information.
    Enabling Group Policy Preferences Debug Logging using the RSAT
    http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx
    Best regards,
    Frank Shen

  • EMET 5.x Configure EAF+ and ASR using Group Policy

    I'm deploying EMET 5.2 in a test environment here at the office, and trying using Group Policy to configure the actual EMET mitigation policies.  I'm aware of the new mitigations in 5.x, EAF+ and ASR, but I don't see any way to configure those using
    Group Policy; they're not in the "available parameters" list in the GPO description, and nothing is mentioned about configuring them using GPO in the 5.2 config guide.  Is there something I'm missing?  I definitely updated the Group Policy
    files with the latest from 5.2 in our domain's sysvol.
    For example, to match the default configuration, I'd want a few GPO config lines like:
    *\7-Zip\7zG.exe -EAF -EAF+ -ASR
    *\Adobe\Acrobat*\Acrobat\Acrobat.exe -ASR

    Hi.
    Read this please: 
    Works well for the enterprise. Enterprise IT professionals can easily deploy EMET through Microsoft System Center Configuration Manager and apply Group Policies in Windows Active Directory to comply with enterprise account, user, and
    role policies. Administrators can customize and configure EMET deployments and determine which applications they want to protect through which mitigation techniques. 
    I found it at the
    Emet 5.2 Download website, in Details

  • Use Pop-up Blocker disabled policy not working via IE Administrative Templates on Server 2012.

    I'm finding I can't make any adjustments to the pop-up blocker setting at all.
    I've set Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone and the option in there for "Use Pop-up Blocker" to be disabled. As for trusted sites we want to allow pop ups. however after saving this and using GPupdate /force
    from a command line and restarting the policy is not applying.
    We also tried adding the sites in question to Internet Explorer/Pop-Up Allow List when we found that the trusted sites zone setting was not working but it also does not work that way either.

    Hi,
    You have to configure Pop-up blocker settings both in Trusted Sites Zone and Intranet Zone.
    Please refer the below thread on similar issue,
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/c1c0cd21-ebd7-42c8-81af-cc32296834a9/popup-blocker-group-policy?forum=winserverGP
    Regards,
    Gopi
    JiJi
    Technologies

Maybe you are looking for