randle Posted June 21, 2011 Posted June 21, 2011 Hmm. Feel I'm missing something simple here. I've setup a GPO with a GPP shared printer mapping. This is setup on a computer OU under the User Configuration node with loopback processing enabled under Computer Configuration. I'm not using Item-level targeting yet as this is just a test so am restricting this to one OU but Authenticated users have read permissions to the GPO so should apply to all. My problem is that I get no printer appearing on logon. The only event log information I'm getting is an app log warning telling me that the printer driver was added. The computer I'm testing is a Windows XP SP3 with the client extensions update installed. I will be moving to Windows 7 but need this running on XP for the time being. Any ideas?
MYK-IT Posted June 21, 2011 Posted June 21, 2011 Hi Randle, Just double checked our settings as we deploy printers via the same method to Windows XP Clients. GPO Policy within OU of the intended computer account(s) Computer Configuration: User Group Policy loopback processing mode: Enabled - Merge User Configuration: Preferences > Control Panel Settings > Printers Order: 1 - Delete > All Networked Printers 2 - Replace > \\server\share Installed Group Policy Preferences Client Side Extentions for Windows XP
chazzy2501 Posted June 21, 2011 Posted June 21, 2011 (edited) Mine map fine using gpp but i don't check the "run in users security context". http://img217.imageshack.us/img217/3256/gppprinting.png Uploaded with ImageShack.us Edited June 21, 2011 by chazzy2501
sted Posted June 21, 2011 Posted June 21, 2011 have you deployed the update to the gp pcs that allows gpp setting to apply? kb943729 iirc
randle Posted June 21, 2011 Author Posted June 21, 2011 My settings look to be exactly the same as yours MYK-IT although don't have the delete job in place but trying to remove all unneccessary variables initially. Again my settings are pretty much the same as yours chazzy2501 but need this mapping through Computer Configuration with loopback as users are in a completely separate OU outside of this current heirachy. Interestingly the "Run in logged-on user's security context..." tickbox can be used in place of loopback processing although only speed read through the article.
randle Posted June 21, 2011 Author Posted June 21, 2011 have you deployed the update to the gp pcs that allows gpp setting to apply? kb943729 iirc Yes client extensions have been installed through WSUS.
chazzy2501 Posted June 21, 2011 Posted June 21, 2011 If you look at my setup I don't use loopback. I add all the printers as default but then use the item level targeting to see which OU the PC is in. My PCs are in a different OU to my users but in the same domain. 1
randle Posted June 21, 2011 Author Posted June 21, 2011 I have tried the same configuration as you mention but no change unfortunately. My thinking was that looking at your screenshot, your users are located in the "Year..." folders(?) and this GPO is set above these meaning they inherit these GPP settings and so don't require loopback processing whereas my users are outside the root OU for these computers because I have an RM network and a smaller Vanilla setup running parallel but the users reside in the RM heirachy which is why loopback is required in this instance otherwise the setting would never get applied to the user logging on.
sted Posted June 21, 2011 Posted June 21, 2011 if you create a user in the same ou as the pc and apply the policy to them does it work? 1
randle Posted June 21, 2011 Author Posted June 21, 2011 Creating a fresh user directly within the OU works and the printer gets mapped. Moving the user to my proper user OU's outside of this structure also still works. The only difference is that the test user I just created isn't a member of any of the GPO's my other users are meaning I need to find out what GPO is causing this to falter. Interestingly..again I noticed that after about 45 minutes or so, the mapping appears for my initial test user. Feels like there's just a long delay somewhere along the line.
randle Posted June 21, 2011 Author Posted June 21, 2011 chazzy2501 you are right. My test user still shows this printer without loopback enabled in this case. Appears it works different to logon scripts through GPO delivery Struggling to figure out the conflict here though
MYK-IT Posted June 21, 2011 Posted June 21, 2011 Creating a fresh user directly within the OU works and the printer gets mapped. Moving the user to my proper user OU's outside of this structure also still works. The only difference is that the test user I just created isn't a member of any of the GPO's my other users are meaning I need to find out what GPO is causing this to falter. Interestingly..again I noticed that after about 45 minutes or so, the mapping appears for my initial test user. Feels like there's just a long delay somewhere along the line. GPUPDATE /FORCE inbetween changing GPO settings on the test PC may help.
randle Posted June 21, 2011 Author Posted June 21, 2011 Think I may have found the culprit. Seems that my remove network printers vbs script on the top OU may have been running after the GPP and so removed the printer after it had been added. Will do more testing tomorrow to confirm this and let you know.
chazzy2501 Posted June 22, 2011 Posted June 22, 2011 Think I may have found the culprit. Seems that my remove network printers vbs script on the top OU may have been running after the GPP and so removed the printer after it had been added. Will do more testing tomorrow to confirm this and let you know. classic!
randle Posted June 22, 2011 Author Posted June 22, 2011 Well was definitely the case and am pretty please this was fixed in a day for once Something new learnt aswell. GPO Login scripts apply after GPP. Cheers all for your suggestions
randle Posted June 22, 2011 Author Posted June 22, 2011 Right this is really starting to annoy me now. After extensive testing in as many ways as I could think I got this working as I wanted and even set my drives to map using GPP also but all of a sudden an hour later none of my preferences are now applying!! I really don't know how this can simply go from mapping everything as expected to just nothing when no additional changes have been made from when it was last working. Even my test machine that's been rebooted numerous times now doesn't map anything and a gepresult shows that the policies are being applied!! I've gone back to basics and created a user in the OU container where these policies are applied and who isn't a member of any domain groups other than "domain users" yet this time unlike before I get nothing still. I'm unsure what I can try next other than restore all my old logon scripts pfffft. Anyone any ideas?
chazzy2501 Posted June 22, 2011 Posted June 22, 2011 Run gpresult /h gpreport.html from a vista or windows 7 client (I know your using xpsp3 butI don't know if this works in xp) and find the gpreport.html and you can see how everything applied INCLUDING the preferences (Cause RSOP.msc doen't show them).
randle Posted June 22, 2011 Author Posted June 22, 2011 (edited) There's no problems with replication. Checked event logs and the reset of the network is functioning fine. I've run the RSOP wizard from the GPMC. On my test machine the preferences have processed and am getting successful results now for some reason (Seems very flakey) yet on another machine in an office over the other side of the school the same report doesn't show these applying at all. I've been googling and some mention that sometimes applying the GP isn't triggered when a change is made to the policy and so doesn't process on next logon which appears to be the case seeing as sometimes this does and sometimes it doesn't so enabling “Process even if the Group Policy objects have not changed” is the suggestion but the setting that needs changing (Drive maps preference extension policy processing) isn't present under "Computer Configuration | Policies | Administrative Templates | System | Group Policy" where it's meant to be. I'm viewing this from a RSAT GPMC FYI. Edited June 22, 2011 by randle
randle Posted June 24, 2011 Author Posted June 24, 2011 Well for those interested. I found and added the Win 2k8 GPP ADMX template to the central store and was then able to enable the Printers Policy Processing "Process even if the GPOs have not changed" setting which looks like it's now mapping consistently. I've not tried this for drive mapping yet but want to make sure this works for printers first going by my recent attempts
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now