mrbios

I'd be very interested to hear how you get on, I'm continuing to test, removing a users profile, logging on when profile exists, logging on to pcs that user has never logged on to before etc. It's working fine on all the usual methods i use to recreate the issue. So far I'm unable to cause a printer not to map today...which is insanely rare. I've now tested on machiens running 1607, 1703 and 1709 too.

They are 2012R2

Could someone else who can repeat this issue consistently test this out please: On your domain controller(s) go to HKLM > System > CurrentControlSet > Services > LanmanServer > Parameters Add the REG_DWORD of SmbServerNameHardeningLevel with a value of 0, restart your DCs after doing that then see if your printer mappings are more reliable. I certainly by no means wish to keep that reg key in place, but having read about KB3172985 which isn't available in our build of windows 10, presumably built in, which then took me to this item: https://blogs.technet.microsoft.com/askpfeplat/2016/07/05/who-broke-my-user-gpos/ which in turn took me to looking at https://support.microsoft.com/en-us/help/3161561/ms16-075-and-ms16-076-description-of-the-security-update-for-windows-n so i thought i would test it out. From my limited testing, it appears to be loads more reliable!!!!! I still had to restart the print spooler as above on one attempt for a printer to show up....however that little fix didn't work at all for me before. I have 8 PCs in my staffroom, they were the most consistently reproducible with this issue, not mapping printers on about 90% of logins. However since changing that and testing every PC, a printer came up on every login!!! EDIT: Ok i've tested on 10 random computers now in multiple different classrooms across two versions of windows 10. This is working perfectly..... EDIT2: I forgot to add, i also added "Domain Computers" to the security groups with read access to my printer mapping policy (even though authenticated users is already there) not sure if that had any bearing though.

We have it, i think they find it useful. For the most part i setup the sims sync then forgot about it until recently when they emailed me asking to switch to XoD for GDPR purposes. The best kind of teaching tool in my opinion.....one that doesn't bother me with issues!

For those still deploying printers by scripts, have you tried delaying the printer mapping script until 30 seconds after logon? Using something like this rather than logon scripts in GP: How to schedule a delayed start logon script with Group Policy I just wonder if it only happens on first logon if removing the script or group policy mapping as part of the logon itself would help?

This has got to the point that we really need someone from Microsoft involved that can actually feedback the issue internally and relay possible solutions. Unfortunately though I've no idea how to go about that in order to get back to the right people?

Happens with 1607, 1703 and 1709 for me.

Has anyone had any success doing this with printer scripts? using this: rundll32.exe printui.dll PrintUIEntry /q /in /n "\\Printserver\printername" With a spooler restart straight afterwards? I'm tempted to give that a test. EDIT: Finally managed to get a PC to reproduce the problem, tried the above, didn't work Tried running the above script but with /dn to delete the printer that should be mapped. Appeared to remove it. Then ran the above script again to add it, went through the motions but still doesn't actually appear in the printers window. Interesting, so the printer is actually added and connected somewhat correctly. However it's not displaying. Possible solution: rundll32 printui.dll PrintUIEntry /ga /n\\printserver\printername Gw /q /y I've tried all sorts to get the printer to appear. As soon as i ran that, it worked! EDIT: Oh that's adding a per machine connection, so per machine works, per user doesn't.

I'm still seeing this problem. Students on mandatory profiles, staff on local, both get the issue. Windows 10 build 1607, 1703 and 1709. Interesting that you say it's on profile creation @FN-GM I'd not thought of that before. We previously had an issue where printers could be there when logging on, then they would disappear at some point during that logon session, however i think i fixed that one. When it happens to you lot, if you have the printer set to be available in the directory, do you find that the printer that should be there, isn't displayed in the directory? For example i've got T8, T9 T6. If i login to room T6 and the printer isn't there, I'l see T9 and T8 in the directory but not T6. I can then type the path to it manually such as \\printserver\T6 and it'll map fine.

Phoenix were always good for me, best price every year......Until this year! Thanks to @Millgate.

I was forced to use Uniflow for 4 years. It finally came to an end in November, now a MUCH MUCH MUCH happier papercut user. Highly recommend it.

Horrible idea to make that into a film. Some of the comments i've seen about this film so far have been less than positive...specifically the exclusion of the one British or two French people that were involved. Interestingly....i was in Paris that same day, from 21-23rd. Thankfully not on that train though!

HP/Cisco prices forced me to look elsewhere, and i went with ubiquiti for the two buildings i needed to upgrade. Quite pleased with them, and they'd fit in nicely for you with your wifi network, their prices are very reasonable, especially on the gbics. The only part i found a bit of a sticking point is the lack of copper based uplink ports. If they just had some 10Gb copper ports they'd be absolutely perfect. Quite a few others here have been moving to ubiquiti for switches too, so far I've not seen anything show stoppingly bad about them. (They lack any real "core" options though)

Tried it as both, doesn't appear to work as a startup script. Only seems to run correctly as a domain admin when set as a logon script on the occasions when the driver doesn't come up as in use.

net stop spooler rename-item -Path "HKLM:\System\CurrentControlSet\Control\Print\Environments\Windows x64\Print Processors\winprint" -NewName "WinPrint.old" net start spooler cscript C:\Windows\System32\Printing_Admin_Scripts\en-US\Prnmngr.vbs -x cscript C:\Windows\System32\Printing_Admin_Scripts\en-US\Prndrvr.vbs -d -m "EPSON Universal Print Driver" -v 3 -e "Windows x64" net stop spooler rename-item -Path "HKLM:\System\CurrentControlSet\Control\Print\Environments\Windows x64\Print Processors\winprint.old" -NewName "WinPrint" net start spooler cscript C:\Windows\System32\Printing_Admin_Scripts\en-US\Prndrvr.vbs -a -m "EPSON Universal Print Driver" -v 3 -e "Windows x64" -i "\\printserv\Printer Drivers\Epson Universal Driver 2.68.1\E_JFB0DE.INF" h "\\printserv\Printer Drivers\Epson Universal Driver 2.68.1" The issue, and reason for this script, is a broken newer version of a print driver that i need to remove and replace with an older version. This isn't happening automatically, and the reason for the reg keys and spooler stop/start is the driver getting stuck in a "Driver is in use" state. I've tested this script manually, and it works when run as elevated admin. However i need to run this as a logon script and at the moment the "Rename-Item" components give me this error: "Requested registry access is not allowed" I've tried changing all the permissions and ownership of the specific key I want to rename, but nothing appears to work. How can i elevate this script to run as administrator on logon? Is that even possible?

I've got an Epson printer, using papercut global postscript driver, documents with OpenDyslexic font in them. The postscript driver is set to "Download as SoftFont" which works perfectly with windows 10. However it will not work for Windows 7. Same driver, same printer, same settings, Same user, same policies applied to the PCs. Anyone have any suggestions? I've tried both office 2013 and 2016. Same result in both. I've checked the font is installed properly, which it is and it generally works fine besides printing it. The error i get is: ERROR: invalidfont OFFENDING COMMAND: definefont STACK: /Font -dictionary- /ADCFAA+OpenDyslexic-Regular Any documents without this font work perfectly. I just don't understand why it seems as though the download as softfont setting doesn't work in Windows 7?

Think it was this i used: https://www.microsoft.com/en-gb/download/details.aspx?id=35584 Just installed that on to the same server the 2016 one is running on, added the KMS key and away it went.

Hi Junz, they're not I'm afraid, sorry i should have updated the thread. They went in the summer to a local school.

Unfortunately not, I stopped looking into it and we've ended up telling all the kids not to bother changing their passwords. We store an export of all the kids logins on a staff shared area so that staff can help them with passwords. They also get a label to stick in their planners with the password on, and use their emails as their username. The amount of time we were having to spend helping kids with passwords and staff trying to log them in during pixl sessions was horrific. Now that their username is their email and their password never changes it's a LOT easier, but i do wish i could get the SSO working with google account linking.

My understanding is that you can either buy a set number of CALs for external access (at the max simultaneous expected connections), or buy an external connector license which provides you with unlimited external users. You still need separate CALs for internal devices. It's generally cheapest for places like us to go for the CALs rather than the external connector license, unless you're expecting to allow a lot of people on at once.

Last quote i had was £587 for the external connector, and £5.74 per FTE for the CALs

Ahhhh thank you, that was driving me crazy. I also forgot to disable NLA after changing to RDP security layer which almost had me. It's working now !

I hope I'm not just being an idiot here.... I've setup a Server 2016 RDS server, installed RDS roles, found an annoying bug that when creating a collection I have to remove and re-add the session host server upon creating the collection else RDP complains that there's no servers in the pool....i can RDP from a windows machine to it fine now and login as a standard user. However using some Axel terminals I keep getting an error: SSL Server Error : Access denied - please try re-logging in First thing i notice: I'm being given an axel login window, rather than being taken straight to the RDP login screen. All the same settings work fine with 2008R2. I've updated the firmware on the terminal I'm testing to the latest beta, and i've tried a factory reset incase I had any odd settings in place. I've got security settings on both the server and terminal both set to negotiate and client compatible, though i've tried these on a range of settings. Anyone else had any issues with Axel terminals and Server 2016? Suggestions on what I'm doing wrong?

Seems this went away for a few months and now it's back in full force. Normally it's a one day issue, then the next day it has cleared itself. However we now appear to be getting it every day. Has anyone found any links between this issue and smoothwall perchance? Is there a certain way of using google that triggers this perhaps? Frustrating! I did try emailing a google company email last time this occurred asking if it was possible to be whitelisted from it happening. Got no response so I'm guessing it's not possible....

Ah turns out I was just being too presumptuous then. Assumed the 2016KMS would be like server 2016 where it activates everything before it. Installed the Office 2013 volume pack and it works. Thanks