Windows Server 2008 R2 Thread, GPO Deploy Papercut to users in Technical; I want to deploy the Papercut client to certain users but only when they login to certain machines. For example ...
17th March 2014, 03:05 PM #1
GPO Deploy Papercut to users
I want to deploy the Papercut client to certain users but only when they login to certain machines. For example I want it for 6th formers but only when those students login to machines in 1 particular room.
Is this possible using Group Policy Loopback processing? if so how?
17th March 2014, 04:08 PM #2
I had to actually install the remote service on the workstation, create a user policy and specify a program to run on login, which was the remote PaperCut app, works like a charm for just this one person.
If you need to you can just add more accounts to this user policy and install the remote PaperCut app to all the workstations that require it.
Ohh! BTW this was on an RMCC4 network but I am sure this would work on Vanilla just as well
17th March 2014, 04:22 PM #3
Was this for the Server part or the client? I am talking about the client install so users can see how much credit they have on screen. I only want it installed for a set of users and only when they log into a set of computers. When they go elsewhere it shouldn't be available to them.
Originally Posted by bossman
17th March 2014, 04:37 PM #4
Yes this is what I meant by the remote app (client) you can also if my memory serves me correctly configure the client to run from the server with a config file to make it do what you want.
Originally Posted by fiza
17th March 2014, 04:39 PM #5
Last edited by bossman; 17th March 2014 at 04:40 PM.
18th March 2014, 12:20 PM #6
Using the MSI isn't the issue. Its more of a Group Policy question really.
I want to deploy the MSI but only for the 6th form and make it only available to them when they login to computers in their own room. I don't want the program available to other users who use those computers and I don't want it available to the 6th form when they use other computers.
Maybe im asking too much of Group Policy.
18th March 2014, 01:59 PM #7
You would probably need to create a GPO and link it to the computers.
Enable loopback processing and set in the user configuration the papercut exe to run at login.
You would then need a wmi filter that only lets the policy run if the user is a member of a secuirty group.
Unfortunatly i cant help with this bit. i only have a wmi filter for if a file exists and i robbed that from google.
Last edited by dany2010; 18th March 2014 at 02:03 PM.
18th March 2014, 02:03 PM #8
I don't think you can use WMI filtering to check for user group membership.
18th March 2014, 02:07 PM #9
How about on the group policy settings you can remove authenticated users from the security filtering. (the page where you can see what the gpo is linked to)
Remove authenticated users and just add the security groups you want it to run on.
Not sure if because its using loopback if it would apply with just a use security group in there.
Worth a go, im just thinking aloud.
Last edited by dany2010; 18th March 2014 at 02:09 PM.
18th March 2014, 02:08 PM #10
File-based ACL that excludes pupils who aren't 6th form.
Use an existing 6th-form security group as a filter to run/not-run the program at login?
So install it everywhere, just restrict who can run it.
18th March 2014, 02:20 PM #11
Or go for a cmd script and run this script as the login script with loopback. Just change the if statement. Not tried or tested.
Checking AD Group Membership from a Batch File | IT. Tech. Internet.
As you can probably tell when we have a problem here my mind just goes crazy and is like try this, try that, now this...
echo Checking if %user% is member of %group%...
for /f %%f in ('"net user %user% /domain | findstr /i %group%"') do set /a i=%i%+1
if %i% gtr 0 (goto :member)
echo %user% is not member of %group%
echo %user% is member of %group%
Normally get a answer fairly quickly though.
Last edited by dany2010; 18th March 2014 at 02:25 PM.
By burgemaster in forum Windows Server 2008 R2
Last Post: 16th November 2011, 01:55 PM
By SimpleSi in forum Windows Server 2000/2003
Last Post: 9th November 2011, 10:41 AM
By Tricky_Dicky in forum Wireless Networks
Last Post: 23rd March 2010, 06:42 PM
By HMCTech in forum Windows
Last Post: 17th March 2010, 03:02 PM
Last Post: 21st November 2006, 02:47 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)