GPO Deploy Papercut to users

[fiza]

I want to deploy the Papercut client to certain users but only when they login to certain machines. For example I want it for 6th formers but only when those students login to machines in 1 particular room.

 

Is this possible using Group Policy Loopback processing? if so how?

[bossman]

@fiza:

 

I had to actually install the remote service on the workstation, create a user policy and specify a program to run on login, which was the remote PaperCut app, works like a charm for just this one person.

 

If you need to you can just add more accounts to this user policy and install the remote PaperCut app to all the workstations that require it.

 

Ohh! BTW this was on an RMCC4 network but I am sure this would work on Vanilla just as well

[fiza]

@fiza:

 

I had to actually install the remote service on the workstation, create a user policy and specify a program to run on login, which was the remote PaperCut app, works like a charm for just this one person.

 

If you need to you can just add more accounts to this user policy and install the remote PaperCut app to all the workstations that require it.

 

Ohh! BTW this was on an RMCC4 network but I am sure this would work on Vanilla just as well

 

Was this for the Server part or the client? I am talking about the client install so users can see how much credit they have on screen. I only want it installed for a set of users and only when they log into a set of computers. When they go elsewhere it shouldn't be available to them.

[bossman]

Was this for the Server part or the client? I am talking about the client install so users can see how much credit they have on screen. I only want it installed for a set of users and only when they log into a set of computers. When they go elsewhere it shouldn't be available to them.

 

Yes this is what I meant by the remote app (client) you can also if my memory serves me correctly configure the client to run from the server with a config file to make it do what you want.

[bossman]

@fiza:

 

This may be of help: User Client

 

and here: PaperCut 12.3 Release – It’s often the little things that count. – PaperCut Blog / News

 

Edited March 17, 2014 by bossman

[fiza]

Using the MSI isn't the issue. Its more of a Group Policy question really.

 

I want to deploy the MSI but only for the 6th form and make it only available to them when they login to computers in their own room. I don't want the program available to other users who use those computers and I don't want it available to the 6th form when they use other computers.

 

Maybe im asking too much of Group Policy.

[dany2010]

You would probably need to create a GPO and link it to the computers.

Enable loopback processing and set in the user configuration the papercut exe to run at login.

 

You would then need a wmi filter that only lets the policy run if the user is a member of a secuirty group.

Unfortunatly i cant help with this bit. i only have a wmi filter for if a file exists and i robbed that from google.

Edited March 18, 2014 by dany2010

[fiza]

I don't think you can use WMI filtering to check for user group membership.

[dany2010]

How about on the group policy settings you can remove authenticated users from the security filtering. (the page where you can see what the gpo is linked to)

 

Remove authenticated users and just add the security groups you want it to run on.

Not sure if because its using loopback if it would apply with just a use security group in there.

 

Worth a go, im just thinking aloud.

Edited March 18, 2014 by dany2010

[pete]

File-based ACL that excludes pupils who aren't 6th form.

 

Use an existing 6th-form security group as a filter to run/not-run the program at login?

 

So install it everywhere, just restrict who can run it.

[dany2010]

Or go for a cmd script and run this script as the login script with loopback. Just change the if statement. Not tried or tested.

 

Checking AD Group Membership from a Batch File | IT. Tech. Internet.

 

@echo off
cls
set i=0
set group=SomeAdGroup
set user=%username%
echo Checking if %user% is member of %group%...
for /f %%f in ('"net user %user% /domain | findstr /i %group%"') do set /a i=%i%+1
if %i% gtr 0 (goto :member)
:nomember
echo %user% is not member of %group%
goto :end
:member
echo %user% is member of %group%
:end

 

As you can probably tell when we have a problem here my mind just goes crazy and is like try this, try that, now this...

Normally get a answer fairly quickly though.

Edited March 18, 2014 by dany2010