Networks

Ask something
Question Locked

Deploying Printers With GPO and Groups (Server 2003 AD)

0 helpful
5 replies

by ctcbarney 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

OK...here's the background...

I would like to deploy a printer to a "printer OU" which is populated only with a Group comprised strictly of users (no machines). I have been able to successfully deploy this printer from the OU with both a script and Group Policy to Users when the Users have been moved directly to that OU. Because of several issues, I do not want to move Users from their original OU into the "printer OU" and would prefer to manage situations like this using Groups instead.

Using both a logon script (either USER or COMPUTER) and GPO (separately, of course), both deploy to Users, not Groups, however.

Has anyone successfully deployed a printer (or any GPO for that matter) to a specific Group, similar to what I've described above?

Thanks!

5 replies

by churdoo

with a logon script that's processed by all users, via ldap you can test if the logging on user is a member of a particular security group, and if so, can execute a properly configured printui command to deploy the printer?

by ctcbarney

That's a clever workaround...I'll tinker with that and see if I can get it to work....thanks!

by churdoo

I just thought of a method using GPO, sorry I didn't mention it before.

Go back to your printer deployment GPO and link the GPO at a hierarchical level that it will be applied to all users (or link it to multiple OU's), but assign permissions to the GPO itself to control which users it will be applied to, i.e. a security group which contain the users that you want to apply it to.

I forgot to mention that you can use permissions on the GPO to manipulate applying the GPO in a manner that does not necessarily fit your OU structure

by ctcbarney

Thank you for the additional suggestion...I will give it a shot on Monday!

This discussion is closed to new replies.