+ Post New Thread
Results 1 to 11 of 11
Windows Server 2008 R2 Thread, GPO Deploy Papercut to users in Technical; I want to deploy the Papercut client to certain users but only when they login to certain machines. For example ...
  1. #1

    fiza's Avatar
    Join Date
    Dec 2008
    Location
    London
    Posts
    2,095
    Thank Post
    407
    Thanked 310 Times in 262 Posts
    Rep Power
    152

    GPO Deploy Papercut to users

    I want to deploy the Papercut client to certain users but only when they login to certain machines. For example I want it for 6th formers but only when those students login to machines in 1 particular room.

    Is this possible using Group Policy Loopback processing? if so how?

  2. #2

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,905
    Thank Post
    1,186
    Thanked 1,057 Times in 749 Posts
    Rep Power
    328
    @fiza:

    I had to actually install the remote service on the workstation, create a user policy and specify a program to run on login, which was the remote PaperCut app, works like a charm for just this one person.

    If you need to you can just add more accounts to this user policy and install the remote PaperCut app to all the workstations that require it.

    Ohh! BTW this was on an RMCC4 network but I am sure this would work on Vanilla just as well

  3. #3

    fiza's Avatar
    Join Date
    Dec 2008
    Location
    London
    Posts
    2,095
    Thank Post
    407
    Thanked 310 Times in 262 Posts
    Rep Power
    152
    Quote Originally Posted by bossman View Post
    @fiza:

    I had to actually install the remote service on the workstation, create a user policy and specify a program to run on login, which was the remote PaperCut app, works like a charm for just this one person.

    If you need to you can just add more accounts to this user policy and install the remote PaperCut app to all the workstations that require it.

    Ohh! BTW this was on an RMCC4 network but I am sure this would work on Vanilla just as well
    Was this for the Server part or the client? I am talking about the client install so users can see how much credit they have on screen. I only want it installed for a set of users and only when they log into a set of computers. When they go elsewhere it shouldn't be available to them.

  4. #4

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,905
    Thank Post
    1,186
    Thanked 1,057 Times in 749 Posts
    Rep Power
    328
    Quote Originally Posted by fiza View Post
    Was this for the Server part or the client? I am talking about the client install so users can see how much credit they have on screen. I only want it installed for a set of users and only when they log into a set of computers. When they go elsewhere it shouldn't be available to them.
    Yes this is what I meant by the remote app (client) you can also if my memory serves me correctly configure the client to run from the server with a config file to make it do what you want.

  5. Thanks to bossman from:

    fiza (18th March 2014)

  6. #5

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,905
    Thank Post
    1,186
    Thanked 1,057 Times in 749 Posts
    Rep Power
    328
    Last edited by bossman; 17th March 2014 at 04:40 PM.

  7. #6

    fiza's Avatar
    Join Date
    Dec 2008
    Location
    London
    Posts
    2,095
    Thank Post
    407
    Thanked 310 Times in 262 Posts
    Rep Power
    152
    Using the MSI isn't the issue. Its more of a Group Policy question really.

    I want to deploy the MSI but only for the 6th form and make it only available to them when they login to computers in their own room. I don't want the program available to other users who use those computers and I don't want it available to the 6th form when they use other computers.

    Maybe im asking too much of Group Policy.

  8. #7

    Join Date
    Nov 2011
    Posts
    611
    Thank Post
    85
    Thanked 21 Times in 19 Posts
    Rep Power
    10
    You would probably need to create a GPO and link it to the computers.
    Enable loopback processing and set in the user configuration the papercut exe to run at login.

    You would then need a wmi filter that only lets the policy run if the user is a member of a secuirty group.
    Unfortunatly i cant help with this bit. i only have a wmi filter for if a file exists and i robbed that from google.
    Last edited by dany2010; 18th March 2014 at 02:03 PM.

  9. #8

    fiza's Avatar
    Join Date
    Dec 2008
    Location
    London
    Posts
    2,095
    Thank Post
    407
    Thanked 310 Times in 262 Posts
    Rep Power
    152
    I don't think you can use WMI filtering to check for user group membership.

  10. #9

    Join Date
    Nov 2011
    Posts
    611
    Thank Post
    85
    Thanked 21 Times in 19 Posts
    Rep Power
    10
    How about on the group policy settings you can remove authenticated users from the security filtering. (the page where you can see what the gpo is linked to)

    Remove authenticated users and just add the security groups you want it to run on.
    Not sure if because its using loopback if it would apply with just a use security group in there.

    Worth a go, im just thinking aloud.
    Last edited by dany2010; 18th March 2014 at 02:09 PM.

  11. #10


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,630
    Thank Post
    275
    Thanked 777 Times in 604 Posts
    Rep Power
    223
    File-based ACL that excludes pupils who aren't 6th form.

    Use an existing 6th-form security group as a filter to run/not-run the program at login?

    So install it everywhere, just restrict who can run it.

  12. Thanks to pete from:

    fiza (18th March 2014)

  13. #11

    Join Date
    Nov 2011
    Posts
    611
    Thank Post
    85
    Thanked 21 Times in 19 Posts
    Rep Power
    10
    Or go for a cmd script and run this script as the login script with loopback. Just change the if statement. Not tried or tested.

    Checking AD Group Membership from a Batch File | IT. Tech. Internet.

    Code:
    @echo off
     cls
     set i=0
     set group=SomeAdGroup
     set user=%username%
     echo Checking if %user% is member of %group%...
     for /f %%f in ('"net user %user% /domain | findstr /i %group%"') do set /a i=%i%+1
     if %i% gtr 0 (goto :member)
     :nomember
     echo %user% is not member of %group%
     goto :end
     :member
     echo %user% is member of %group%
     :end
    As you can probably tell when we have a problem here my mind just goes crazy and is like try this, try that, now this...
    Normally get a answer fairly quickly though.
    Last edited by dany2010; 18th March 2014 at 02:25 PM.

  14. Thanks to dany2010 from:

    fiza (18th March 2014)

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 12
    Last Post: 16th November 2011, 01:55 PM
  2. Beginners guide to msi and gpo deployments
    By SimpleSi in forum Windows Server 2000/2003
    Replies: 12
    Last Post: 9th November 2011, 10:41 AM
  3. Deploying PaperCut to the network
    By Tricky_Dicky in forum Wireless Networks
    Replies: 11
    Last Post: 23rd March 2010, 06:42 PM
  4. Deploying Printers to XP using GPO
    By HMCTech in forum Windows
    Replies: 7
    Last Post: 17th March 2010, 03:02 PM
  5. Replies: 10
    Last Post: 21st November 2006, 02:47 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •