3

I am having trouble with deploying printers with GPP. I have 40 Printers that need to be deployed to different users. Only certain users need certain printers.

I've got a GPO setup with user printer preferences and a list of 5 printers for testing. Each of those printers I have targeted to security groups for each printer. My test users are added to the various security groups.

If I set the Security filter of the policy to "Authenticated Users" then ALL (not just test users) get the printers deployed to them. If I leave the security filter blank, NO users get the printers.

I was under the impression, since I targeted each printer to a specific Security group, only users in that group will get that printer.

Thanks for any help you can give, Travis

TMacie
  • 45

3 Answers3

0

For an easy way to manage those deployment I would use 1 GPO/GPP per printer, with one security group for each GPO.

I do this in all the shop I manage as when a user X call to get added a printer Y, you just have to add him to the security group and voila, it's done.

yagmoth555
  • 17,495
0

I actually just did what you are trying to do.

I am on a 2008 domain with 2008 Terminal Servers and Windows 7 computers.

So I have a GPO. This is linked to the OU location which contains the users/computers you want the GPO to apply to. In my case (and likely your case) you will want to link the GPO to the domain.

Security Filtering set on the GPO is Authenticated Users. Printers are defined under User Configuration: Preferences: Control Panel Settings: Printers.

For the printer on the Common tab I have "Run in logged-on user's security context (user policy option)" checked. I also checked "Item-level targeting" so I can choose which security groups should have that printer.

Run gpupdate /force on a workstation. Log out of the workstation and log back on and the user you log in with should get the appropriate printers you specified for the security groups the user has membership in.

user5870571
  • 3,250
0

So, I was doing everything right...except one of the printers I was testing with was deployed using another group policy that I didn't know about. it turns out, if you have a printer deployed in ANY other group policy and then you try to do it with ILT, and set the Security to Authenticated users, or even another AD group, ALL AD users will get that printer.

Thanks for everyone's help.

Travis

TMacie
  • 45