Users can delete GPO deployed printers

[apollo777]

Hello,

I have a problem with a GPO deployed printer per-user using the print services "deploy via GPO".

Printers available for users, that's all right. But users can remove printers in some cases (I'm still can't exactly reproduce this) and this affects other users logged on the same machine. One user removes printer and another can't print. Is it normal behavior or I have missed something?

P.S. In Security tab users can only Print.

P.S.S Client and server on Windows Server 2012 R2

Edited August 28, 2014 by apollo777

[6Foot2]

Have you set the Group Policy that prevents users from deleting printers?

 

http://i.snag.gy/mQmiP.jpg

[Grey-gear]

There is also a setting that can prevent users accessing the divices and printers window as well. I think it's under control panel part

[apollo777]

Thanks a lot. That's may be accepted solution.

Is it normal behavior, can You confirm?

[6Foot2]

If you do not want your users deleting the printers you have deployed this would be an acceptable solution.

 

Is this normal? Yes if we are talking about preventing changes being made by your end users.

 

If it is about the behavior of the users themselves that is another matter. Our users are not what you would call co-operative and so you could say that trying to delete deployed printers would be something we could expect from our users. This may not be the case elsewhere.