• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

Assigning printers via gpo and multiple sites

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Windows

View previous topic :: View next topic  
Author Message
graycat
SF Mod
SF Mod


Joined: 29 Apr 2005
Posts: 16777195
Location: London, UK

Offline

PostPosted: Wed Jun 08, 2011 12:47 pm    Post subject: Assigning printers via gpo and multiple sites Reply with quote

Hey all,

I'm moving our printers over from scripted install to being assigned via GPO itself. Is there any way of targeting the printers so they only install if the user is local (ie: on the same site) other than assigning them at the site level?

Either that or can I split printers in a gpo so users on Floor1 get printers on the same floor whilst Floor2 get another set?

Cheers.
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
AdamV
SF Mod
SF Mod


Joined: 06 Oct 2004
Posts: 24
Location: Leeds, UK

Offline

PostPosted: Sat Jun 11, 2011 3:44 am    Post subject: Reply with quote

Are you using pushprinterconnections.exe, or native GP Preferences?

Do you need to target users or machines with this?

Site makes sense for mobile users with laptops as you will never know where they might be, and on the other hand you probably only need to give them one printer for a location / floor rather than every single one.

Or just teach people how to add printers from the (active) directory themselves - search by name (which is on the label on the printer, right?) or by functionality ("I need to print A3 colour today") and double click the one you want. Bingo.
If you're using Vista or Windows 7 it also has the neat trick of remembering your default printer for each network location, so it's best if you can let that do it's job and don't destroy / recreate every printer at each logon.

My gut feel would be to target machines with policies at OU level, and use security groups with computer accounts in for floors or other divisions, and set each policy to use a group for security filtering.

Alternative might be to target users, again by groups, and you can probably fix some of the group membership with nesting eg if you know that users in the group LondonSales are all on 4th floor, just nest that group inside, rather than adding users individually.
So if you use a site policy for mobile users, apply a security filter to it for the group called "LaptopUsers" to stop it applying to anyone else.
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Windows All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register