+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 17
Windows Server 2008 R2 Thread, Urgent GPO help needed in Technical; Hi Everyone and thanks for reading. I have a little situation which wrecks my weekend but I just don't seem ...
  1. #1

    Join Date
    Sep 2012
    Location
    Dublin
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Urgent GPO help needed

    Hi Everyone and thanks for reading.

    I have a little situation which wrecks my weekend but I just don't seem to be able to find out what the problem is.
    I want to create a GPO that adds printers on computers in four rooms - simple enough in theory ;-)

    Done so far:

    - created a batch script that adds printers, tested and working fine.
    - created 4 separate OUs and then 4 linked GPOs
    - everything has to be applied per computer, so I moved computers to the OU (no users in there as they change rooms)
    - added the script under computer configuration, policies window settings

    I restart the PC - nothing happens, I run gpresult /r and it doesnt even look like my policy is applied.

    Since then I have tried adding a group with computers in the OU under "security filtering"

    What am I missing? Why is the GPO not applied to the computers if it is linked to the OU with selected computers?
    Any ideas would be much appreciated - going crazy in here trying to get this resolved.

  2. #2


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,703
    Thank Post
    352
    Thanked 806 Times in 721 Posts
    Rep Power
    348
    Hello,

    I expect you're facing pain because it's a script running on computer start up not user logon.

    If you want to use a batch file, I suggest you enable GPO loopback 'merge' in your GPO for that OU so it will merge the user setting (logon script to run your batch file) with everything else that will be applied as part of the users own GPOs.

    Pretty good post to help - Default Printer Batch File

    I expect everything you've done so far is absolutely fine, just moving the script from Computer to User and making sure loopback is on merge (don't use replace in this situation) will probably save your weekend

  3. #3

    Join Date
    Sep 2012
    Location
    Dublin
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks for your reply kmount - if I add the script under user configuration instead of computer will it work even though the OU has only computers in it? I have the policy security filtering selected for usergroups but OU has no user accounts in it.
    What worries me is that the GPO doesn't show under gpresult /r - I know I can run gpupdate /force but that requires me to go to each computer and there are 100 of them - if I have to do it this way I may as well just log in and run script manually...

  4. #4

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,779
    Thank Post
    960
    Thanked 1,378 Times in 842 Posts
    Blog Entries
    1
    Rep Power
    456
    Quote Originally Posted by Yarpen View Post
    Thanks for your reply kmount - if I add the script under user configuration instead of computer will it work even though the OU has only computers in it? I have the policy security filtering selected for usergroups but OU has no user accounts in it.
    What worries me is that the GPO doesn't show under gpresult /r - I know I can run gpupdate /force but that requires me to go to each computer and there are 100 of them - if I have to do it this way I may as well just log in and run script manually...
    No if PC is the only thing in the OU it wont unless you enable group policy loopback processing.
    If you are trying to add printers you can use a vbs in the users OU which would check the machine name to apply the relevant printer. Thats I used to do it.
    It depends if you use a proper machine naming policy, we were {DEP}-{ROOM}-{ASSET TAG}
    Last edited by ZeroHour; 29th September 2012 at 01:03 PM.

  5. #5


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,703
    Thank Post
    352
    Thanked 806 Times in 721 Posts
    Rep Power
    348
    Yeah, that's why I said you need to enable the loopback processing to merge so it will run the user side of the gpo even though it's a computer ou.

  6. #6

    Join Date
    Sep 2012
    Location
    Dublin
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hi ZeroHour

    They do not have a proper naming convention - all PC names start with room number but rest is random. This gave me enough information to split them between 4 OU's but will be too random to set up a script based on the names.
    I have enabled the loopback processing on the policy and even run gpupdate /force but still not getting any printers assigned. I am however getting the printer policy listed under gpresult /r since I run the /force command.

  7. #7


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,703
    Thank Post
    352
    Thanked 806 Times in 721 Posts
    Rep Power
    348
    Modify your script to create a folder on your C drive or something to be sure the script is running.

    Also, check your event log incase a software restriction policy is stopping the script running.

  8. #8
    detjo's Avatar
    Join Date
    Feb 2008
    Posts
    394
    Thank Post
    14
    Thanked 58 Times in 48 Posts
    Rep Power
    33
    Quote Originally Posted by Yarpen View Post
    They do not have a proper naming convention - all PC names start with room number but rest is random.
    That's all you need, isnt it? Why not use the room number part to add the printer

  9. #9
    ADMaster's Avatar
    Join Date
    May 2012
    Posts
    352
    Thank Post
    5
    Thanked 38 Times in 33 Posts
    Rep Power
    25
    May I suggest you consider group policy preferences with item level targeting? I have a policy called gp prefs computer linked at the top level of my domain with all the printers. I use item level targeting to specify which printer goes to what room based on OU.

    Item level targeting will let you do a lot more then OU though, individual computer, security group, ip range etc etc. Here is a post about it on windows networking.

    Group Policy Preferences: Top 5 Item-Level Targeting Options

  10. #10

    Join Date
    Sep 2012
    Location
    Dublin
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by dana_lehman View Post
    May I suggest you consider group policy preferences with item level targeting? I have a policy called gp prefs computer linked at the top level of my domain with all the printers. I use item level targeting to specify which printer goes to what room based on OU.

    Item level targeting will let you do a lot more then OU though, individual computer, security group, ip range etc etc. Here is a post about it on windows networking.

    Group Policy Preferences: Top 5 Item-Level Targeting Options
    Good thinking, completely forgot about ILT - will try adding all of the printers on the default policy and just use ITL to each OU containing computers. I just hope it will automatically work for each user that uses the target computer.
    Fingers crossed ;-)

  11. #11

    Join Date
    Sep 2012
    Location
    Dublin
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hmmm, something is still wrong and not quite sure what:
    - group policy is added fine on the pc as per gpresult /r but no printers are added (added through GPP and item taregetting at the OU)
    - tested and printers work fine, I can add them manually with same settings as set in group policy properties

  12. #12
    ADMaster's Avatar
    Join Date
    May 2012
    Posts
    352
    Thank Post
    5
    Thanked 38 Times in 33 Posts
    Rep Power
    25
    On the print server where they are shared, go to the advanced tab and set the print processes to winprint raw.

    Look at the event log and see if you get any errors, if the event log says that the print processor is not supported, this setting will fix it.

    Also you have not mentioned what your server and client OS's are, if XP you will need the client side extensions installed.

    http://www.microsoft.com/en-us/downl...s.aspx?id=3628

  13. #13

    nephilim's Avatar
    Join Date
    Nov 2008
    Location
    Dunstable
    Posts
    12,441
    Thank Post
    1,682
    Thanked 2,041 Times in 1,485 Posts
    Blog Entries
    2
    Rep Power
    461
    This may sound stupid but what OS are you trying to get them to apply to? I understand you're on S2K8R2, but no mention of 2000, ME, XP, Vista, or 7.

    I have known there to be a fault with GPO's not picking up printers on Vista SP1 and previous. Vista SP2 onwards is usually fine. It may help narrow down the issue considerably.

  14. #14

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,779
    Thank Post
    960
    Thanked 1,378 Times in 842 Posts
    Blog Entries
    1
    Rep Power
    456

    RE: Urgent GPO help needed

    Check printers are ran in the users context (check box in gpp printer area somewhere) and users can install drivers which is a gp setting.

  15. Thanks to ZeroHour from:

    Yarpen (1st October 2012)

  16. #15

    Join Date
    Sep 2012
    Location
    Dublin
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Big thanks to everyone who contributed. It took me a full day to get everything up and running but in the end I moved printers to 2008R2 server and deployed through print management. Worked on 90% of computers (remaining 10% being XP)



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. EXTREMELY URGENT HELP NEEDED!
    By pritchardavid in forum Windows Server 2008 R2
    Replies: 15
    Last Post: 18th May 2010, 12:04 PM
  2. Urgent Help needed!
    By The_GuRu in forum Network and Classroom Management
    Replies: 27
    Last Post: 20th February 2008, 10:20 AM
  3. Replies: 11
    Last Post: 6th September 2007, 08:10 PM
  4. Exchange Guru's help needed urgently
    By tosca925 in forum Windows
    Replies: 3
    Last Post: 6th September 2007, 11:37 AM
  5. Replies: 11
    Last Post: 16th May 2007, 05:27 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •