Yarpen

In this scenario there was a GPO set to "all_users" which has overwritten all other settings - domain admins were not part of all_users ;-)

SOLUTION FOUND! Will post it here in case someone has a similar issue ;-) Default workstation policy had a "local policies/allow log on through terminal services" setting set to ALL USERS (not domain users) and of course some Muppet forgot to add domain admins to all_users" group...

Hi Guys Quick question in relation to local logon on XP machines. I support new site so don't know the infrastructure inside out yet hence this cry for help ;-) Problem: Domain admin accounts cant log in to win XP machines remotely. Yes, domain admins are in remote operators as normal. I have checked GPO and deny local log on is not set. This affects all XP machines but not Win7. No policies set on domain admin OU besides main GPO, tested all settings in GPO - no cookie ;-( Now, not a huge issue but it drives me mad as I don't know where to turn next. Seen this issue before years back and remember it was fixed by either adding remote operator permissions or checking the GPO settings. Any ideas would be welcome guys! DC: Win2008R" Domain functional level: 2008 No recent changes software/hardware

Thanks for the heads up, I havent tried pushprinterconnections but will keep that in mind if there are any problems with current setup.

Big thanks to everyone who contributed. It took me a full day to get everything up and running but in the end I moved printers to 2008R2 server and deployed through print management. Worked on 90% of computers (remaining 10% being XP)

Hmmm, something is still wrong and not quite sure what: - group policy is added fine on the pc as per gpresult /r but no printers are added (added through GPP and item taregetting at the OU) - tested and printers work fine, I can add them manually with same settings as set in group policy properties

Good thinking, completely forgot about ILT - will try adding all of the printers on the default policy and just use ITL to each OU containing computers. I just hope it will automatically work for each user that uses the target computer. Fingers crossed ;-)

Hi ZeroHour They do not have a proper naming convention - all PC names start with room number but rest is random. This gave me enough information to split them between 4 OU's but will be too random to set up a script based on the names. I have enabled the loopback processing on the policy and even run gpupdate /force but still not getting any printers assigned. I am however getting the printer policy listed under gpresult /r since I run the /force command.

Thanks for your reply kmount - if I add the script under user configuration instead of computer will it work even though the OU has only computers in it? I have the policy security filtering selected for usergroups but OU has no user accounts in it. What worries me is that the GPO doesn't show under gpresult /r - I know I can run gpupdate /force but that requires me to go to each computer and there are 100 of them - if I have to do it this way I may as well just log in and run script manually...

Hi Everyone and thanks for reading. I have a little situation which wrecks my weekend but I just don't seem to be able to find out what the problem is. I want to create a GPO that adds printers on computers in four rooms - simple enough in theory ;-) Done so far: - created a batch script that adds printers, tested and working fine. - created 4 separate OUs and then 4 linked GPOs - everything has to be applied per computer, so I moved computers to the OU (no users in there as they change rooms) - added the script under computer configuration, policies window settings I restart the PC - nothing happens, I run gpresult /r and it doesnt even look like my policy is applied. Since then I have tried adding a group with computers in the OU under "security filtering" What am I missing? Why is the GPO not applied to the computers if it is linked to the OU with selected computers? Any ideas would be much appreciated - going crazy in here trying to get this resolved.