Deploying Printers

[Jawloms]

So is running con2prt.exe the only reliable way of deploying printers still?

 

We had a load of printers deployed using "Deployed printers" and GPOs. We now have all new printers. I have removed all the deployed printers (by clicking "Deploy printer" and "Remove all"), deployed the new printers, and checked the GPOs. All computers still connect to the old "FollowYou" queue, most devices seem to not pick up the new printers, be they User and Computer deployed, and some devices are setting "Adobe PDF" as their default printer whether they've picked up the new printer or not. A gpupdate seems to make the new printers appear, but these policies have been in place for a couple of days now. Shouldn't things be picking them up by now?

 

Any thoughts please?

 

Thank you

 

Stuart

[Cw2k]

We are using this method now and have not seen a failed deployment since we implemented: https://katystech.blog/2020/08/powershell-printer-script/

[thimon]

We are using this method now and have not seen a failed deployment since we implemented: https://katystech.blog/2020/08/powershell-printer-script/

 

Does this still work even with the latest Windows update installed that requires you to be an admin to install network printers?

[Norphy]

According to the blog, it’s run as a startup script, which are executed as the SYSTEM user iirc. It should still work.

[ADMaster]

I read the blog and it said logon script.

I deploy with GPP in a user policy. Most of my printers were deployed with the run in user context checked. Those printers would not deploy after the update. I updated the policy to uncheck that option so they should deploy now.

 

Something else I do that speeds up deployment is load the driver during imaging. This also works post deployment.

Add the printer as admin, then remove it, the driver will be available to the user then. This can be done with PDQ or any other remote tools you have. A startup script should do the job too.

 

rundll32 printui.dll PrintUIEntry /in /n"\\printserver\printer" /q
rundll32 printui.dll PrintUIEntry /dn /n"\\printserver\printer" /q

 

I've only tested on a VM, I'll release the patch to more computers tomorrow, so we'll see.

 

I'm also going to explore this script as an alternative.

[slugshead]

 

rundll32 printui.dll PrintUIEntry /in /n"\\printserver\printer" /q
rundll32 printui.dll PrintUIEntry /dn /n"\\printserver\printer" /q

 

 

Blast from the past, this is how we used to do it in Windows XP days, then con2prt came around

[Cw2k]

Does this still work even with the latest Windows update installed that requires you to be an admin to install network printers?

 

The latest update broke that. We have already have point and print restrictions enabled so have used the temp registry key to disable the admin install required and will be deploying drivers via sccm so we can remove the temp reg key.

[Jawloms]

I simply cannot get the default printer set using group policy. Anyone any last thoughts please before I bin it off and use a con2prt script?

 

Stuart

[Rob_D]

We get pretty reliable deployment through the below GPO settings.

[Jawloms]

I can see that you are doing it as "User Configuration", but is this linked to a Computer OU, or a User OU? I'd like (for example) the room 20 printer to be the default printer when they are in room 20, the room 15 printer to be the default when in room 15, etc.

 

Stuart

[Guest obsidianpillar]

I can see that you are doing it as "User Configuration", but is this linked to a Computer OU, or a User OU? I'd like (for example) the room 20 printer to be the default printer when they are in room 20, the room 15 printer to be the default when in room 15, etc.

 

Stuart

The method above is using Loopback processing (User-level GPO's applying on a computer level). As that deployment is using the "FollowMe" setup (aka jobs sent to print queue to be released off any printer of users' choosing) - this method works fine.

 

In your case, you may have some luck with Item-Level Targeting etc to map printers. I may be missing something; but in yesteryears I always used something direct within Group Policy to map printers and never had any problems.

[Rob_D]

The method above is using Loopback processing (User-level GPO's applying on a computer level). As that deployment is using the "FollowMe" setup (aka jobs sent to print queue to be released off any printer of users' choosing) - this method works fine.

That's correct, thanks.

While this one is the for the follow me, it works just as well installing individual printers based on computer/location. As in if a PC is in an office with a private desk printer, then the desk printer is mapped (as well as the follow-me) and set as default. (We've set up different OUs for each room that has access to a local printer).

[3s-gtech]

We do it with a policy linked to a user OU - it was really unreliable on a computer OU. Then GPP with item level targeting picking out the printer depending on the name of the PC.

[Jawloms]

That's correct, thanks.

While this one is the for the follow me, it works just as well installing individual printers based on computer/location. As in if a PC is in an office with a private desk printer, then the desk printer is mapped (as well as the follow-me) and set as default. (We've set up different OUs for each room that has access to a local printer).

 

I've been using loopback processing mode too.

 

We do it with a policy linked to a user OU - it was really unreliable on a computer OU. Then GPP with item level targeting picking out the printer depending on the name of the PC.

 

I'll take a look at this, thanks.

 

Thanks to all for your input as usual!

[Jawloms]

Then GPP with item level targeting picking out the printer depending on the name of the PC.

 

I'm struggling with this. Are you able to be more specific? I thought I'd done it right, but apparently not!

[Cw2k]

I simply cannot get the default printer set using group policy. Anyone any last thoughts please before I bin it off and use a con2prt script?

 

Stuart

 

Have you turned off letting windows managing default printer queues in User Configuration\Administrative Templates\Control Panel\Printers as by default windows override the default printer you set in gpo

[ADMaster]

I'm struggling with this. Are you able to be more specific? I thought I'd done it right, but apparently not!

 

This is how I do it.

Create a user GPP policy

Do not check run in logged on user context. This will allow it to process as the computer. So far this has avoided the admin prompts for me.

Under ITL set rules for the computer to belong to a specific OU, Security group or netbios name. There is two options on the OU and group rules. User belongs to or computer belongs to. In this case you want computer.

 

When it is the follow me queue or a lab, it is easy to target the OU.

If it is a shared office printer, I put the users and computers in a group called print-queuename

This serves two purposes, one gives a group to target for deployment and two security of who can access the printer. Weather that is windows built in permissions or via papercut.

Finally for a one off single office and / or the teacher laptop for a lab. Netbios name. Although I think I got rid of most during a clean up this summer.

I had a single user printer user change for this school year. I took the time to remove the netbios name and just create a security group. It only has one computer and one user in it, but if the new person doesn’t stay, I’ve got one place to change it.

The problem with netbios names is you have to update the GPO when the user or computer changes vs just adding to a security group.

Also if you rename the computer for whatever reason, the name in a security group is automatically updated, GPP not so.

[Jawloms]

Have you turned off letting windows managing default printer queues in User Configuration\Administrative Templates\Control Panel\Printers as by default windows override the default printer you set in gpo

 

Yes I have.

[tech-man]

After lots of messing around, we decided to use this…. http://www.printermapper.com