SG300's vlan isolation except for shared printers

Hello,
We have 2 x SG300-20's and 1 x SG300-10.
We want to have a few vlans to isolate different departments from each other while still providing access to the broadband uplink as well as shared printers.
The setup we would like would be something like this:
1 x SG300-20 for VLAN 2
1 x SG300-20 for VLAN 3
1 x SG300-10 for VLAN 4-6
Shared printer(s) on VLAN 6 which should be accessible from all other vlans
We also have a RV180 router sitting in front of the switches which should provide broadband uplink access and trunking for the switches.
We need to forbid vlan 2-5 from communicating with each other.
In order to simplify and test, we are using the SG300-10 switch only in L3 mode at the moment with 3 computers to simulate 3 vlans but it seems to turn on inter-vlan routing on every port and vlan automatically when you set the switch in L3 mode and in L2 mode, vlan isolation works but we need to use the router to serve up dhcp and inter-vlan routing on a single vlan, which after over 6 hours of having the cisco tech logged into our system to try to set it up he gave up and said he didn't understand why it was not working...
Is there a way to use this setup, or something simillar?
We have contacted cisco support a second time and have had a tech test our switch config file for a week now and still no progress on this and we need to have this working asap.
We were told that this was possible with our equipment but it seems there are serious limitations with this gear that even the cisco techs don't know about...
We can provide the switch config upon request.
Thanks!

Hi Tom,
I replaced the cisco RV180 with a netgear FVS318N and so far, in the lab anyways, I've gotten the setup the following setup to work:
SG300-10 in layer 3 mode:
Port 1 - Admin Port - Vlan 1 pvid
Port 2 - general - VLAN 2 pvid - tagged vlan 4 - forbid vlan 3 - dhcp 192.168.2.0/24 (iface 192.168.2.203)
Port 3 - general - VLAN 3 pvid - tagged vlan 4 - forbid vlan 2 - dhcp 192.168.3.0/24 (iface 192.168.3.203)
Port 4 - general - VLAN 4 - Tagged vlan 2 - Tagged vlan 3 - dhcp 192.168.4.0/24 (iface 192.168.4.203)
Port 10 - Trunk - pvid vlan 1 - Tagged 2-3-4 - (iface 192.168.254.203)
Routes:
Added default gateway to vlan 1 iface on router
Added 192.168.1.0/24 gateway vlan 1 iface router ip (lab's upstream router is on that block which doesn't have an iface on the switch)
IPV4 ACL:
Port 2 - priority 500 - Deny any to vlan 3 subnet
priority 1000 - permit any to any
Port 3 - priority 500 - Deny any to vlan 2 subnet
priority 1000 - permit any to any
On the netgear router, vanilla config with the 4 vlans added to it and inter-vlan routing enabled with switch port 10 plugged into router port 7 for uplink.
So far it seems to be working correctly, still need to test vlan hopping and static ip's and routing to simulate mis-configured or malicious computers plugged into the two main vlans but replacing the router seems to have done the job.
Perhaps further testing would of resulted in a working setup with the RV180 but after so many hours wasted on this setup by us and by the cisco tech, it was time to make a move.
What's your opinion on this setup Tom?
I'm so tired I'm getting cross-eyed and might be forgetting something important.
Thanks!

Similar Messages

Lpadmin to add shared printers to clients

My setup: A Mini running 10.6.8 Server and thirty late model iMacs running 10.6.8 as clients. Sever is sharing four late model wide format Epsons for use by the iMacs. Printers are shared on the server via ipp. Sever and clients have identical print drivers and PPDs installed.
I want to be able to use lpadmin to add printers to the clients. In the past I've been able to do this in this particular setup using an dnssd queue in the lpadmin command. My preference would be an ipp queue but I've never been able to get that to work.
After upgrading printer drivers I cannot get any sort of lpadmin command to properly load a functioning printer. HELP!
What does work:
I can use lpadmin to add a printer to a client bypassing the server and connecting directly to the networked printer (lpd queue)
I can add a server hosted printer to a client using the gui and the default browser and all is well. This works for "Shared" printers (ipp queue) and for "Bonjour Shared" printers (dnssd queue)
What doesn't work:
I cannot add a server hosted printer using the gui and the IP tab by selecting the IPP option and entering the server IP Address and proper queue name.
No form of lpadmin command that I have tried (MANY) will successfully add a printer. This includes command formats that did work before the driver upgrades.
On these options that fail, the printer seems to be properly added. The correct driver is loaded and the user sees all of the correct and unique options for the printer in the print dialog. Upon printing the job fails on the client. It never reaches the server. The Apple print queue shows the job as "printing" and "copying data" for a while then either puts the printer into a Pause state (most common) or shows a Communication Error message. The most common error log segment looks like this:
D [08/Feb/2012:09:27:39 -0600] [Job 20] Set job-printer-state-message to "Empty print file!", current level=ERROR
D [08/Feb/2012:09:27:39 -0600] [Job 20] cgpdftoraster: bytes written for sheet 1 = 33100650
D [08/Feb/2012:09:27:39 -0600] [Job 20] Backend returned status 1 (failed)
D [08/Feb/2012:09:27:39 -0600] [Job 20] Printer stopped due to backend errors; please consult the error_log file for details.
D [08/Feb/2012:09:27:39 -0600] [Job 20] End of messages
D [08/Feb/2012:09:27:39 -0600] [Job 20] printer-state=5(stopped)
D [08/Feb/2012:09:27:39 -0600] [Job 20] printer-state-message="Empty print file!"
D [08/Feb/2012:09:27:39 -0600] [Job 20] printer-state-reasons=paused
Here's a very small portion of the lpadmin versions that I've tried. I've done all of the below also using the -P option to specify the driver file location in /Library/printers… And I've also tried not specifying a driver at all. I've tried placing -E at different places within the command or leaving it out altogether. I've tried leaving the -o option out. I'm not sure where else to look.
lpadmin -p 4900_Photo -E -L "FAC 162B" -v ipp://129.62.177.206:631/printers/4900_Photo -m EPSON\ Epson\ Stylus\ Pro\ 4900.gz -o printer-is-shared=false
lpadmin -p 4900_Photo -L "FAC 162B" -v dnssd://4900_Photo%20%40%20artlab-server._ipp._tcp.local./cups -m EPSON\ Epson\ Stylus\ Pro\ 4900.gz -o printer-is-shared=false -E
Any hints greatly appreciated!
Bob Smith

Hi,
This can be caused by using large fonts in the Windows Display Settings, the text will move the button out of the field of view on the form, and the form will not resize to compensate. Please go to Control Panel -> Appearance and Personalization ->
Display, change to a smaller font size to check the result.
We may also suspect the Screen Resolution caused this, change to a different resolution to check the result.
Regards,
Melon Chen
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

Hello there - I am sharing an iPhoto library across two accounts on the same computer - it works fine EXCEPT for Quicktime movies - they play on one account and claim I don't have the rights on the other - all permissions are on and ok?

Hello there - I am sharing an iPhoto library across two accounts on the same computer - it works fine EXCEPT for Quicktime movies - they play on one account and claim I don't have the rights on the other - all permissions are on and ok?

It should be in the Users/ Shared folder.
Back Up and try rebuild the library: hold down the command and option (or alt) keys while launching iPhoto. Use the resulting dialogue to rebuild. Note the option to check and repair Library Permissions
Regards
TD

Looking for Vlan isolation with some scenarios

Hello All,
I am in the process of validating NPS and few other product like PacketFence
Whats i interested at most is two scenarios that can do isolation to designated VLAN in tree scenario
First scenario : We have Symantec endpoint protection AV and we would like to have isolation in case of
client infection
AV not installed
Second scenario: Our organization firewalls have ids Snort based capable of sending syslog alert or SQL log alert, we would like to have ability to inform some how the nap/nps server with violating IP and have it VLAN isolated.
Third Scenario: unknown device attached to socket wall conf room or somewhere else will be isolated Most of network equipment are based on HP Procurve 2910al ,2920 ,1900
My question to you NPS experts is possible with given above scenarios?
Please advice
Thanks

Hi talb,
If we only use the build-in SHV in NPS, we can't achieve your goal.
The build-in SHV supports checking of the following items:
Firewall settings
Antivirus settins
Spyware protection settings
Update settings
If you want to customize the NAP, some coding is needed.
For detailed information, please refer to the link below:
https://msdn.microsoft.com/en-us/library/aa369712(VS.85).aspx
Here is the Public API for NAP:
https://msdn.microsoft.com/en-us/library/aa369706(VS.85).aspx
Best Regards.
Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Shared Printers - Using a DNS record instead of server name for failover

I have a Server 2012 Print Server. I plan on creating a second one for failover purposes. I will be installing the shared printers on client PCs using Group policy preferences. Instead of using
\\servername\printer as the path, can I create a DNS record for the server name and use
\\dnsname\printer? That way, if the first server dies, I just edit the dns record to point to the second server instead of renaming the second server and changing the IP of the second server.

Hi,
Based on your description, we can try creating a DNS alias for our printer server and use the alias instead of the host name in the UNC path. When this server goes down, we
can make the alias pointing to another printer server.
Regarding how to create an alias for a DNS host name, the following article can be referred to for more information.
Add an Alias (CNAME) Resource Record to a Zone
http://technet.microsoft.com/en-us/library/cc772053.aspx
Hope it helps.
Best regards,
Frank Shen

Problem with multiple instances of shared printers being installed on client computers when the spooler service is started

Hello,
We have Windows Server 2012 and clients using Windows 8. We've been having some printer problems for awhile now that I haven't been able to figure out for the life of me. The main problem is the fact that printers are installed on computers automatically
once the drivers are installed. The side-effect of multiple instances of each printer showing up is very annoying but I suspect fixing the initial problem will resolve this secondary one.
Here is the rundown:
We add the shared printers on logon to the clients using the GPO thus installing the drivers locally.
Whenever the spooler on the client is restarted with the drivers installed, all of the
shared printers that were previously installed get duplicated 5 more times (for a total of 6 instances of each shared printer) on the "Devices and Printers" page. This happens
all the time.
Removing them only fixes the issue temporarily, as soon as the spooler or computer is restarted, it seems these shared printers are somehow found on the network and the duplicates return.
Two of these printers are located on different clients, installed locally and shared while the other three are all installed on a server and shared through it. The issue is the same on all of them.
Cleaning the spooler completely (registry and files from C:\system32\spool) fixes the issue temporarily as well since, as soon as the drivers are reinstalled, the issue occurs again.
I've tried many things (disabling the GPO, editing the GPO, printer shares, registry, etc.) and searched tirelessly online for a cause and solution but I'm stumped. Does anybody have any idea what might be causing this problem and how to resolve it?
Thanks for your time!
Update #1: I just tried adding the NoNetCrawling option in the registry found in this article -> http://support.microsoft.com/kb/320138/en-us
I couldn't find the same for Windows 8 unfortunately. I also tried disabling network discovery and all other sharing options to no avail.
Update #2: I tried isolating the computer to a different subnet and restarting the spooler and, sure enough, the issue didn't occur. This proves that the issue is network share related. Also, as soon as I change the IP back to the regular domain
subnet one, the multiple printer instances re-appeared again.
Update #3: I just tried doing the same thing but on the server where the printers are installed and shared and, sure enough, despite being in a different subnet, the issue occurred. This leads me to believe there is a setting on this server at fault.
Question is, which one?

We have deployed a brand new Active Directory domain for a customer. ALL the servers without exception are Windows 2012 R2 and all clients are Windows 8.1 32bit VDI clients.
The issue that we have is around network printers.
We are deploying 4 printers from a Windows 2012 R2 Server via the print management/Deploy Printer and assigning that to a GPO. The printers are deployed to the Computers which should mean that the users get all 4 printers which they then should be allowed
to set their default and personal settings for that printer.
Our printers are deployed like this:
1. Created security group
2. Assigned VDI computers to the security group
3. Created GPO to reflect security group
4. Modify GPO to do security filtering based on computer group membership
5. Deployed 4 x printers through Print Management to the GPO on a per machine basis
However, on the users Devices and Printers screen we are not seeing the 4 printers. For some users
they see duplicates of all 4 printers so e.g they can have upwards of 8 or more. Other users have no printers displayed whatsoever. The next time they log off or restart they then have a different amount of printers displayed.
If they try and set the default then it will set and the next time they check the default may have moved to another printer even without logging off or back on.
Now, where this gets strange is within an application such as MS Word 2013 or Notepad if they use the file and print menu the printers will be listed, even if the user has no printers displayed in Devices and Printers. If the users selects a printer then they
can then print OK.
If we check HKCU\Printers||Connections then the CORRECT 4 printers are showing as to what is being deployed via the GPO so I know that the Windows 8.1 terminals are receiving the correct printers from the GPO.
To try and correct this over the course of the week we have deployed the printers via Group Policy Preferences to the user and then the PC to no avail. Currently we are using the Print management\Deployed Printers to deploy all 4 printers to the computer via
the Computer GPO.
I believe that this issue is related to the display somehow in Devices and Printers rather than a GPO or print server issue as we can see via the registry the clients are receiving the 4 correct mentioned printers as shown in the registry.
FYI: We only have around 30 users and all users are getting this problem. All users are receiving the same GPO's and have the same few apps installed, Office 2013, Adobe Reader etc.
What we want is for the computers to receive all 4 printers. All users should be able to use all 4 printers but the user should be able to select their particular default, depending where they are located or what they are printing that particular day. Their
particular default should persist after reboot. (We have 2 x Copiers and 2 x HP Laserjets) All users have redirected documents and desktop but the rest of the profile is on the VDI and persists after their reboot. The profile is not roaming as the user is
assigned a particular VDI.
After a week of scratching our heads with this we are open to suggestions and any would be appreciated.
We have tried following the issues on this thread to no avail either as they still return.

Network shared printers stop working; default printer changes

Hello,
Have an odd printing issue that seems to be ongoing and am trying to come up with a good solution or fix for it.
We have an environment that has a Windows 2012R2 Print Server, that is sharing various printers which are also set to List in Directory. Some of the printers are HP and are using the HP Universal driver which shows as "True" for Packaged in
the print management window, and some of the printers are Canon which are using device specific drivers and show as "False" for Packaged. My understanding is that the packaged attribute simply indicates that Point and Print can then download
the driver and install/use it without any security prompts whereas if it is not Packaged, then the driver must be installed on the local server/workstation by an Administrator. We have Group Policy defined such that all Point and Print restrictions are
Disabled.
We then have multiple Remote Desktop Session Hosts based on Server 2008R2 (x64). Users connect to these hosts via thin clients (Wyse) and there is a domain login script using KiXtart that creates printer connections to the shared printers using an address
of \\printserver\printername. We also set the default printer via the login script each time depending on user's group membership.
Each part of this setup is on it's own routed VLAN subnet, so the Print Server is on 192.168.0.x/24, RDSHs are on 192.168.1.x/24 and the printers themselves are on 192.168.2.x/24. There is no firewall or other restrictions between the subnets, all traffic
is allowed to flow.
The issue we are having is two parts, the first is the larger issue, but both are a pain:
1) Randomly (no discernible pattern/reason/timeframe), some Canon printers will stop appearing in Print dialog boxes from applications when a user tries to print. It only seems to happen on the Canon printers. The printer will still show in Control
Panel -> Devices and Printers, but when you right click it and try to go to Printer Properties or view any of the printer settings, you'll get an error saying the printer is not accessible/valid. I have also tried a WMI query for "select * from
win32_printer" and the printer will not be returned. To temporarily fix it, we right click the printer, and choose to remove it and then go through the wizard to re-add the same printer from the directory again. That will correct it and the
user can print again, view all properties, etc. This doesn't happen to every user but happens sporadically and once it happens to a user it seems to pop up once every week or two.
Now, we have made a change and installed the Canon printers in question locally on the Remote Desktop Session Hosts themselves using TCP/IP ports so that each user logging into the session host will see all of the printers. This also seems to have resolved
this issue. So it leads me to think there is some sort of timeout or connection getting dropped, but for no real apparent reason. This is all on a virtualized platform and so the Print Server and Session Hosts have very reliable LAN connections
amongst themselves. And further, we never see the issue with the HP printers, they seem to maintain their stability at all times.
2) The other issue we are seeing is that from time to time the default printer setting changes or vanishes altogether. It doesn't happen to every user but once it does happen it happens regularly (multiple times a day). This happens even when using
the locally mapped TCP/IP printer or when using the network print server. From what I have read and found, this generally seems to be a known issue regarding redirected client printers and some GP settings related thereto. But we aren't redirecting
any local client printers, everything is network based/shared.
In digging into these two issues I have run across the following error we get regularly in the PrintService Event Viewer log:
The print spooler failed to import the printer driver that was downloaded from \\printserver\print$\x64\PCC\ntprint.inf_amd64_59246c3ac1bd3f2a.cab into the driver store for driver Microsoft enhanced Point and Print compatibility driver. Error code= 800f024b.
This can occur if there is a problem with the driver or the digital signature of the driver.
And digging further into that seems to be that their was an error validating one of the DLL files as seen at the following thread: http://social.technet.microsoft.com/Forums/windowsserver/en-US/9fe186e4-52f7-4552-a223-b2320cfc9ed5/driver-install-semi-fails-with-800f024b?forum=winserverprint
We get the exact same error that is shown there UNISRV.DLL being flagged as invalid, and have applied the hotfix indicated in KB2701894.
I am not sure the above error is realted to the issues at hand, but figured it is a good starting point to eliminate it as a potential cause of the issue.
Any input or suggestions on what to do to diagnose or further resolve this would be greatly appreciated!

Alan, I'm getting this error 600 in my company. Is there any fix for this problem?
After installing KB2919355 on Windows 2012 R2, when I try to map a shared printer I receive the following error message: A policy is in effect on your computer which prevents you from connecting to this print queue. Please contact your system administrator.
If I uninstall the patch the shared printer maps correctly.
I also notice that if I copy the driver \\server\print$\x64\PCC\ntprint.inf_amd64_a7ac65d1b7714fb1.cab
from a Windows 2012 R2 before applying KB2919355 to the server that has the patch applyed (and rename it), I can map the printer.
Does anyone know if there is a fix for that?

Issue w/ shared printers and multiple copies

I just bought a Samsung ML-2010 today to replace my aging HP LaserJet 5L. The printer works fine (albeit rather noisily) except for one issue: I can't get it to print multiple copies of a document; if I specify multiple copies, I always get a single copy. I have downloaded the latest driver from Samsung's web site.
Has anyone experienced this? If so, have you found a solution?
Update: It appears to be a problem with shared printers. I have the printer connected to a wireless print server. When I share the printer through my desktop machine (so that I can queue long jobs on the desktop and put my PowerBook to sleep) , I have the issue. When I print directly to the print server from my PowerBook, multiple copies work just fine.

Never mind. I have no idea how I fixed it, but multiple copies are now working when the printer is shared by my desktop machine.

USB Shared Printers (Full Printing Functions)???????

Hi All
Not sure if this is the proper place to ask this question, but here goes.
I have 4 macs, 1 Intel, 1 G5, 1G4 and 1G3 all running the latest system software except for the G3 (10.3.9) I have 3 printers, all HP that I am trying to share through USB Printer Sharing. I have all of them connected via a USB hub to the G3 with Printer Sharing on. But that is not the question, because I can get them to print no problem, but I lose all of the advanced printing functions of each. For example, paper type, quality, etc.
Did I do something wrong, can I get them to work? Or is it just a fact of Printer Sharing?
As a side note, when hooked directly to my main computer (via USB with all drivers loaded) all printing functions work just fine.
Thanks in advance for your responses.
MacBook Pro 17 Mac OS X (10.4.1)
Imac G5 20 Mac OS X (10.4.1)

Make sure that all of the other machines have the same versions of the printer drivers as the sharing machine. That may help.

Powerbook won't see shared printers

hi
i've got 2 imacs, a powermac and an airport express on a local ethernet network. my powerbook accesses the network via the airport.
The imacs have printers connected to them via usb. all the computers except for the powerbook see the shared printers. i believe at one point the powerbook did see the shared printers but now, it doesnt even show the shared printers option in the print/printer pull down menu.
spent a half hour on the phone with apple care while they consulted with higher ups only to tell me they don't support the HP photosmart 2610 printer so they couldnt help me. now i see on the apple site that the 2610 is a mac recommended model.....great....
any thoughts?
thanks,
rob

Let's get some information first:
Do the printers show up in the Print & Fax System
Preferences? If so, do they have checkmarks?
in the powerbook? no. they don't show up there. and printer browser doesnt see them
How is your network arranged? Are all of the
computers connected the same way (wired or
wireless)?
all the other computers are wired. the powerbook is wireless though via airport which is plugged into the same router as the other computers.
Do you have the PowerBook's firewall turned on?
powerbooks firewll is off.
thanks for your attention,
rob

USB Shared Printers????

Hi All
I have 4 macs, 1 Intel, 1 G5, 1G4 and 1G3 all running the latest system software except for the G3 (10.3.9) I have 3 printers, all HP that I am trying to share through USB Printer Sharing. I have all of them connected via a USB hub to the G3 with Printer Sharing on in the sharing system preferences, as well as, share these printers in the "Print & Fax" preference pane.
But none the less, the only computer that can print to the printers is the one directly conected to the printers via the USB cord.
The other computers do not even show a "shared printer" in the print dialog box.
What am I doing wrong?
Please ask if you need additional information.
Thanks in advance.

This may sound silly, but have you added these shared printers in the Printer Setup utility? If you have, have you added the correct printers?
One thing I do is make sure each computer has a different name and when adding shared printers I MAKE SURE that I am adding a printer actually connected to the appropriate computer. For some odd reason, ghost printers occasionally appear on the network (printers listed as being connected to computers that they simply are not connected to).

Photos tells me it is connecting to Library for shared photos. It's been saying this for about ten hours. I can't stop it from searching or get it to do anything else. I can go back to my photos but I can't get Photos to find the shared items.

Photos tells me it is connecting to Library for shared photos. It's been saying this for about ten hours. I can't stop it from searching or get it to do anything else. I can go back to my photos but I can't get Photos to find the shared items.

Be sure Safari does not have the Block Pop-Up Windows preference set.
Where I work now there are several unencrypted VLANs that require authentication, and Safari promptly pops up a window for me to register every time.

Group Policy To Delete Old Shared Printers That Are No Longer Shared

I am having an issue where I am successfully using Group Policy to deploy some new printers.
(Computer Configuration > Policies > Windows Settings > Printer Connections > Use the Share name \\Server\Print_Shared_Name)
but I have on those same desktops some old shared printers (\\Server\Old_Printer_Name). They are IP printers being shared off the server but this printer no longer exists on the server and the IP address is also no longer being used. Tried to use some group
policies to delete the printer for the non-admin users but am having no luck with the printer being removed from the machine. The desktops are all Win7 Service Pack 1 and the Server is Windows Server 2008 R2 Standard
Things I have tried:
1. In my same working policy that I use to install the new printer I tried to add on the following
(User Configuration > Preferences > Control Panel Settings > Printers > New > Shared Printer > Delete > For the share path I enter the old share path name that it shows but actually no longer works so \\Server\Old_Printer_Name)
^This did not work when I sign into the desktop as a non-admin user that has the printer still installed or as an admin that also had the printer installed, ran gpupdate, gpupdate /force, rebooted, restarted print spooler
Tried the same steps above but with the following instead
(Computer Configuration > Preferences > Control Panel Settings > Printers > New > TCP/IP Printer > Delete > I then enter the \\Server\Old_Printer_Name IP Address that it used to use
Same results
2. I also tried to create a registry deletion policy still under this policy that installs the printer as follows:
(Computer Configuration > Preferences > Windows Settings > Registry >
New > Registry Item > Delete > I used the following path: HKEY_CURRENT_USER for the hive and key path is Printers > Connections > Manually entered the key from the desktop for the printer I am trying to remove so ,,SERVER,Old_Printer_Name)
^This did not work when I sign into the desktop as a non-admin user that has the printer still installed or as an admin that also had the printer installed, ran gpupdate, gpupdate /force, rebooted, restarted print spooler
3. I also ran a Group Policy Result and it says that it ran the policy just fine
I've tried these steps and everything was case sensitive but have had no luck. Anything that anyone can suggest or if I am in the wrong area, please kindly point me in the right direction

Hi,
>>(Computer Configuration > Preferences > Windows Settings > Registry >
New > Registry Item > Delete > I used the following path: HKEY_CURRENT_USER for the hive and key path is Printers > Connections > Manually entered the key from the desktop for the printer I am trying to remove so ,,SERVER,Old_Printer_Name)
For we are editing the registry hive under HKEY_CURRENT_USER, the setting should be User Configuration\ Preferences \Windows Settings \ Registry
Best regards,
Frank Shen

GPP Delete policy not working on Windows Server 2008 R2 RDS when deleting shared printers with status access denied.

Hi!
I Have one AD Security group for each shared printer, I have one GPP that map the printer if the user is in the security group that belong to the printer. And one GPP to delete the printer if the user is NOT member of the security group. The security group
is also applied in “Security” tab on the printsrv with PRINT rights and “everyone” is removed. This works 100 % on Windows 7 clients and Windows 2003 Terminal Servers. But on Windows 2008 R2 RDS this dont work.The Delete Policy will not delete the shared
printer. No warning in any logs, and the gpresult shows that the gpo setting applyed sucessfully. The only way I can make the Delete policy work is if i give the user print rights on the printer on the printsrv. Looks like for the policy to work on 2008
R2 the user must have print rights on the printer object on the printserver. The GPP Delete Policy will not delete printers that have status : access denied. Anyone else had this problem?

Hi,
Based on your description, it seems that we need to give users appropriate permissions, for the error
Access is denied is more or less related to permissions.
However, we can avoid deploying the GPP printer delete policy. As far as I know, we can use Item-Lvel Targeting of GPP to push the shared printers
to the targeted users or groups.
Regarding ILT, the following articles can be referred to for more information.
Preference Item-Level Targeting
http://technet.microsoft.com/en-us/library/cc733022.aspx
Security Group Targeting
http://technet.microsoft.com/en-us/library/cc772471.aspx
Best regards,
Frank Shen

HP, Win7, and Drivers for Older Printers Of Course

Running Win7RC 32 Bit just for compatibility testing. My parents have a 5650 and I have a 5850 at home in the Deskjet printer series that have been great printers. Maybe some of HP's best compared to my 600, 700, and 800 series of years past My 5850 is using the 5600 family drivers in Vista 32 Bit and works good. Win7RC is another story BUT it is still considered beta ware. The vast majority of answers in this forum concerning printer drivers state that everyone should wait til October 22. I am asking if there is any hope for us older printer owners in receiving compatiable drivers or should we start looking for new printers? I would imagine that the HP engineers have an idea of what HP products they plan to support and which items will be obsolete. Windows 7 has a lot of anxious people ready to move up from XP and especially Vista. I myself would like to be ready for Win7 when my three pre-ordered copies arrive in October just as many people here would. Would be a shame to load a new OS and not be able to print anything.

By the way, the HP 6MP Laser Jet in my office works with my Win7RC notebook. It is being shared through a server running XP Pro SP3 and received the driver from the server. The Win7RC notebook is also able to print to our HP P4014n Laser Jet network printer OK. I have a 882C Desk Jet on our network running on another XP Pro SP3 PC, but I have not tried connecting to it yet.

SG300's vlan isolation except for shared printers

Similar Messages

Maybe you are looking for