Filtering:  Not Applied (Empty), WSUS Hence why I'm trying to automate as much as possible.                 Setting: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint I used to be on a windows 2003 domain and these worked fine, but since I upgraded to windows 2008 domain it seems to have broken something. Click the New Group Policy Object icon and create a new GPO for the printer that you want to deploy. I have never gotten a printer to deploy successfully using group policy settings.                 Policy:            ForceLogoffWhenHourExpire This issue occurs because the client-side extension that is responsible for applying the GPO does not consider an RODC an acceptable target for performing queries in Active Directory.             Filtering:  Not Applied (Empty), The computer is a part of the following security groups:                 Computer Setting:  Not Enabled, Event Log Settings This topic has been locked by an administrator and is no longer open for commenting. 5.                 Policy:            AuditAccountManage We deploy printers with user preferences, log on times have not been an issue for physical machines, but for VDI’s had to amend this to a log on script because processing the Printers GPO section during log on was taking too long, recent tests show times of approx.                 State:   Enabled, GPO: WSUS Cloud Help Desk: Incoming email is not creating tickets (updated): Which of the following retains the information it's storing when the system power is turned off?                 Computer Setting:  Success, GPO: Default Domain Policy                 Setting: Software\Policies\Microsoft\Windows\System configure your group policy with the connection.                 Origin:           Applied Application, GPO: Install KAV x86 I manually installed the driver on the computer and any subsequent users that logged in had the printers deployed automatically. For example, the first time a user logged into the computer, the printer did not deploy because the driver was not installed.         --------------- Ok I am having problems with gpo's not applying if they are linked to an ou.                 Policy:            EnableGuestAccount Printers are pretty easy to deploy via Group Policy. Take the Challenge ». What OU is the GPO Linked to?             Filtering:  Not Applied (Empty), The user is a part of the following security groups: The most common issue seen with Group Policy is a setting not being applied. if so then thats the issue and I can set it to merge mode? Sysprep?                 Policy:            RequireLogonToChangePassword There are known issues with printers and Read-Only Domain Controllers, even after SP1 for 2008 R2 and Windows 7. That said, I've recently added a handful of Windows 7 machines which all picked up the deployed printers without any problems. It’s easy to configure a Group Policy Preference to deploy a printer, but there’s a few gotchas that may prevent the printer from actually getting installed client side..                 State:   disabled, GPO: File Printer Sharing On and remote administration exception i created a gpo - computer policy. applied the gpo to the OU where my computer/user are located. Result: 29 seconds for the CLIENT to show “Applying Group Policy Printers policy”… then MOVE ON. The most common issue with Group Policy is a setting not being applied. type the name of the printer …                 Computer Setting:  180, GPO: Default Domain Policy         WSUS I have also tested installing the driver on a W7 machine by using the UNC path (\\server\printer) which SUCCESSFULLY installs the driver on that W7 laptop.         Certificate Deployment one is set to replace and the other is set to merge. 0. the merge one is for configuring offline files, which i want to set on a computer basis, the replace one is to add special user account to the local users on the machine. This GPO though is NOT applying successfully to Windows 7 machines.             N/A, Security Options             Filtering:  Not Applied (Empty), Local Admin Rights                 Setting: Software\Policies\Microsoft\Office\11.0\Outlook\RPC     Group Policy slow link threshold:   500 kbps, Applied Group Policy Objects                 Source:           \\kav\KLSHARE\Packages\NetAgent_9.0.2786\exec\Kaspersky Network Agent.msi run gpupdate /force. If not, it can't install the printer because it have to install drivers and needs admin credentials. I can tell and show with screenshots how you set it up, but there is enough written about that already. We also use item level targeting for the computer security group to validate against each one. Not all settings in Printing Defaults applying to clients.         ---------------------- Printers.             Filtering:  Not Applied (Empty), Windows Firewall In the denied gpos section under user i dont even see any of the gpos that are linked to the ou, its like they dont exist. I am not sure if this was something I did wrong or if this is just the way it is.         Domain Computers Where %computername% is the computer name of the Windows XP machine and the %domainname% is the DNS name of your domain.                 AutoInstall:      True I don't recommend this. Take the Daily Challenge », Difference between Logging out and Rebooting, Using Windows Hello (PIN) on all domain systems. Still, printers are not being deployed. You can check the Group Policy log of your Windows 7 machines here: Event Viewer > Application and Services Logs > Microsoft > Windows > Group Policy, Any detailed errors for group policy deployment would be in userenv.log, which you would have to enable on the client computer receiving the policies, http://technet.microsoft.com/en-us/library/cc739088%28WS.10%29.aspx, Do you have any Read-Only Domain Controllers in your environment? The first place to check is the Scope... 2.. Next, check the security filtering.                 State:   Enabled, GPO: User install print drivers (test it), make sure Windows XP machines have KB943729 installed.                 Groupname: ***\LocalAdmins Alternately, create a GPO and link it in the appropriate OU, site, users or group and use the "deploy printer" option.                 Setting: SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop If you perform a gpresult on that computer does it show being applied? drivers , are the right divers added for the client PC  (32/64bit).             GPO: Install Java                 Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU             GPO: Default Domain Policy             GPO: Default Domain Policy         ----------------------         ------------------------         ---------------- They're getting replaced very soon.         NT AUTHORITY\INTERACTIVE When a downlevel setting is not defined, then the upper level, root setting gets applied. Furthermore the only way to get these gpos to actually work is to link them to the top level domain.         Local User Accounts                                    Everyone share printer (if it hadn't been done) and connect it on a client computer. I did have some trouble getting all my printers to add to GPP but with persistence I eventually got all of them added. You could also try to reset the computer and domain sync by performing the following on the Windows XP computer. Also note that even though I pushed out printers with GPP and installed the correct drivers on the server, the printers did not deploy until I manually installed the driver onto each computer.                 Setting: SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules It depends on whether your deploying it in the user configuration as a shared printer (which points it to a print server) or deploying it in the user or computer configuration as an IP printer (which makes it independent, but needs to get the drivers from somewhere), However, I believe that's a conversation for a new topic, and not this one. Group Policy Not Being Applied?         LOCAL                 Computer Setting:  100, Audit Policy     CN=WINXPTEST,OU=Desktop,OU=Domain Computers,DC=***,DC=net         -----------------                 Computer Setting:  Success, Failure, User Rights 2. The GP Client in XP can get confused sometimes. When you run GPRESULT on that machine does it show the computer location in AD? 2. run the following command netdom reset %computername% /domain:%domainname%.             GPO: Default Domain Policy                 Policy:            RetentionDays (test it) make sure Windows XP machines have KB943729 installed. I had no luck getting printers installed with GP but was able to successfully deploy printers with GP preferences.         Local User Accounts     ------------------------------------------------------------------- From what i gather, the one with the replace loopback is causing this issue. GPPreferences item is linked to West Sales Users OU. Scenario 2: Universal Printer Driver shared on server in \\DC\HPPRINT1. Possible to get a screen shot?         ---------------- Have you installed the Group Policy Preference Client Side Extensions on this Windows XP computer? To continue this discussion, please If so that will apply to all users in …     Group Policy was applied from:      DC2.                 Computer Setting:  Success, Failure, GPO: Default Domain Policy     Group Policy was applied from:      DC2. Go to “Printers” and select “Add Printer” from the pop-up menu. Run the command on the computer in question; Then upload the computer.txt file so a second set of eyes can look at it. 4.             N/A, Internet Explorer URLs If you are starting with a new GPO (or changing the scope), you still have to ensure that the GPO is linked and filtered correctly.                 State:   Enabled, GPO: Windows Firewall         NT AUTHORITY\Authenticated Users I did notice something though when editing the GPO on my local machine (using Remote Admin Tools) and editing the GPO on the server. It will make things smoother in the long run, Clustered Certificate Service goes Offline When it fails over to the 2nd Node, Are you smarter than most IT pros?                 Name:         disablerestartonbsod.bat I created a policy regarding user configuration that blocks the user from changing the desktop background. Group policy is being applied to fslogix profiles but once the group policy parameters is changed the fslogix profile remain with the old policy parameter means group policy not being refreshed and updated to the user.                 Policy:            MinimumPasswordLength I have no idea why this suddenly decided to not work, this thread details the same issue but i didnt see any resolution, http://community.spiceworks.com/topic/107533-problems-applying-a-gpo-in-a-nested-ou?page=1&started_from=new_topic.         Install KAV x64         NT AUTHORITY\NETWORK                 Name:             Kaspersky Security Center Network Agent         Enable Remote Desktop                 Setting: Software\Policies\Microsoft\Windows\WindowsUpdate Why?         Disable Offline Files Open the Server Manager console and select to install Print and Document Services role (if not already installed).From Role services list select to install Print Server service.Tip. I also recommend enabling a policy in GPO called Point and Print restrictions. In this case, we are interested in the policy Allow non-administrators to install drivers for these device setup classes in the GPO section Computer Configuration > Policies > Administrative Templates > System > Driver Installation. The first thing to check is Event Viewer > Applications.                         Origin:           Applied Application, GPO: Install Kav Agent v9                 Computer Setting:  Enabled, GPO: Default Domain Policy The first place to check is the Scope Tab on the Group Policy Object (GPO).         Everyone It would be easier to remove the computer from the domain and rejoin it back.                 Policy:            ClearTextPassword i am looking for ENG MAP O Drive which doesnt even appear, Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0         Disable Offline Files                 Policy:            AuditAccountLogon What version of Windows is your print server running?         ----------------                 Policy:            EnableAdminAccount This topic has been locked by an administrator and is no longer open for commenting. In the Local Group Policy Editor, expand the following folders: Computer Configuration. Any WMI filter will still have to evaluate to true for the object that is processing the GPO.                 State:   Enabled, GPO: User install print drivers The main difference with Windows 7 clients is that you shouldn't need the pushprinterconnections.exe that the article refers to. 10 Common Problems Causing Group Policy To Not Apply 1..                 Name:             Java(TM) 6 Update 30                 Computer Setting:  Not Enabled, GPO: Default Domain Policy I do not have enforced checked on any gpo.                 Name:             Kaspersky Endpoint Security 8 for Windows I use Group Policy File Preferences to do this and I have the preference action set to Update. Tested on both xp and windows 7.             N/A, Internet Explorer Security I've checked the thread here: http://community.spiceworks.com/topic/146630-printer-deployed-by-gpo-not-showing-up?started_from=new_topic and those settings are fixed. Group policy not applying to security group.                 State:   Enabled, GPO: WSUS             N/A, Internet Explorer Programs         NT AUTHORITY\Authenticated Users                 Policy:            AuditSystemEvents     -----------------------------     ------------------------------------, Software Installations I find this to be helpful at explaining what loopback is and how to use it. If i do a test with group policy results, the actual esults are not the same.                 State:   Enabled, GPO: Windows Firewall Result: ZERO seconds / “Applying Group Policy Printers policy” never appear. So setting it to replace loopback basically stops any user configuration gpos from applying? As you can tell, it takes around 2 minutes on Applying Group Policy Printer Policy before moving forward. If the GPO containing the preference isn’t applying to the computer/user, then the preference can’t process.                 Setting: Software\Policies\Microsoft\Windows\NetCache         BUILTIN\Administrators The only solution I have found is to go to the XP box and remove it from the domain, reboot twice, and put it back in the domain.                 AutoInstall:      True                 Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU If so, then that setting could trump all downlevel OU user-side settings because all your downlevel OU do not have a Loopback Processing set by default. Type a name for the new Group Policy Object (e.g.         --------------------------                 Setting: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint Path not found? If you haven't looked it over, refer to the following article:  http://www.windowsnetworking.com/articles_tutorials/Deploying-Printers-Group-Policy-Windows-R2.html. Deploying printers is in basic pretty simple if you have Print Management installed on a server. Travis N http://blogs.technet.com/b/grouppolicy/archive/2009/06/24/gp-preferences-set-a-default-printer.aspx. The Network Printer Setup Assistant provides four ways to install printers in the Print Management Console.         --------------------     ----------------------------------------------------                 Computer Setting:  7, GPO: Default Domain Policy I've got it working after the KB patch was installed, gpupdate and reboot.                 Deployment State: Assigned             N/A, Administrative Templates             N/A, Administrative Templates Find printers on the network. Oh yeah, don't forget to add you x32 and x64 drivers to the print server. He doesn't want to reimage the computer? once you work it out a few times, you know where to look for problems. I sure have.         User install print drivers, The following GPOs were not applied because they were filtered out Domain Name:                 ***                 Setting: Software\Policies\Microsoft\Cryptography\AutoEnrollment     CN=testeng,OU=Engineering,OU=Departments,DC=***,DC=*** Can anyone help?         Domain Users                 State:   disabled, GPO: Default Domain Policy         Local Admin Rights See http://support.microsoft.com/kb/231287. Is the user and computer account located under the OU?                 Log Name:          Security, Restricted Groups ask a new question.     Resultant Set Of Policies for User:         Disable Restart on BSOD Any ideas?             N/A, Internet Explorer Connection                 AutoInstall:      True                 Setting: Software\Policies\Microsoft\Windows NT\CurrentVersion\Winlogon                 Deployment State: Assigned                 Computer Setting:  Success, GPO: Default Domain Policy Verify your account http://kudratsapaev.blogspot.com/2009/07/loopback-processing-of-group-policy.html. by             Filtering:  Not Applied (Empty), Always wait for network - prevent drive mapping errors         ---------------------------- Add a TCP / IP printer or web service by IP address or hostname. This happens on every gpo that is linked to the ou, i have 4. Roaming Profile:             Thanks everyone. Add a new printer on an existing port. here is the results. 1. on Check to see if you have a Domain root linked GPO with a computer configuration for Loopback Processing. Local Profile:               C:\Documents and Settings\testeng Do you have any "Block Inheritance" enabled on the OU's? Network printer driver install for non-admins running Win7 and no print server.     ----------------------------------------, Software Installations                 Policy:            MaximumPasswordAge The only thing I didn't notice, is that it wasn't in the list of network printers so I'm going to google around on that.             N/A. ask a new question.                 State:   Enabled, Folder Redirection configure your group policy with the connection. *** That said, if you have any remaining XP clients, you'll need it for the clients to connect the printers successfully.                 State:   Enabled, GPO: Disable Offline Files the computer configs are fine for the gpos that are linked to my computer ou, those all work fine.                 Setting: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint Mar 12, 2012 at 12:59 UTC. Have you tried to create a new GPO with basic settings, assign it to that OU and see what happens? go to the machines and run "gpupdate /force" or "gpupdate /sync" (/force /sync if need be).                 Setting: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services                 State:   Enabled, GPO: Certificate Deployment You can easily test your WMI filters by using the WMI Filter V…         Windows Firewall             N/A, Account Policies The client has to have the drivers too, or must be admin. To make sure that the issue is related to the domain GPO, create a separate OU in the domain and move the problem computer to it.