I have an odd problem on my school network that has just reared its ugly head.
When I try to connect to a network printer from a machine on the domain I get the following error message -
"Connect to Printer - A Policy is in effect on your computer which prevents you from connecting to this print queue. Please contact your system administrator."
This has just started happening in the last few days and as far as both me and my colleague know we haven't made any changes to the network/GPO's or print queues which could have caused it.
It effected 1x laptop (not on the domain) last week and I fixed this by connecting directly to the IP address. It is now effecting several stations & laptops.
Server is Windows Server 2008 R2 and the clients are Windows 7.
There are two network printers (Ricoh Multi-Function) which are shared normally.
There is a batch file which runs a kikscript which allocates different rooms different printers which has not been changed in months.
Things I have tried -
-Restarting the spooling service & the printers themselves
-Stopping the spooler service and deleting items from the 'spool' folder, then starting up again.
-Checked the batch files & the kikscript for errors - nothing detected (these definitely haven't been changed so unlikely to be the issue)
-Connected as an Domain admin I noticed that the printers were present but as soon as I removed them, once I tried to connect them again I received the above error.
-Connected as a regular user without admin rights I get no printers - obviously this just proves that the script is not able to put them back.
-Logged in as a local admin, same error
-Changing the Local Computer Policy via MMC to "Allow print spooler to accept client connections"
-Completely removing a machine from the domain, logging in as local admin, same error.
-Created a 'generic' domain login and gave it admin rights (no groups etc), same result
-Checked that there was a policy in place on the server for 'Point to Print' - this is enabled with the 'users can only print to the machines in their forest' so this all looks good.
-Attempted a 'virus/malware/registry' clean of a random station to rule out anything nefarious
-Rebooting the server
-Creating a completely different print queue from the same IP address and connecting to that.
The things I haven't tried as it would guarantee no-one could access the printer while I was doing it -
-Completely re-installing the print driver/queue on the server from scratch including removing the current driver from the list of potential drivers on the print management screen
-Changing the script (we run a kikscript) to map the printer via an IP (haven't looked into whether this is even possible?)
I will update the post with the latest but this is what I have got to so far - any ideas?