User install print drivers, The following GPOs were not applied because they were filtered out Verify your account on I'm not sure what is going on with it.                 Parameters:   The next step is to allow the user to install the printer drivers via GPO.             N/A, Internet Explorer Programs         Windows Firewall                 State:   Enabled, GPO: Disable Offline Files             Filtering:  Denied (Security), Local Group Policy The printer mapping is successfully created, but is not set as the default printer in the registry. Enforced and did a gpupdate on the test machine, still same issue.                 Setting: Software\Policies\Microsoft\Windows\System If you are using the "deploy printers" functionality in Windows Server, you will need a .exe calledl pushprinters.exe in the scripts folder of your GPO. Travis N I suggest "Enforced" check to the GPO that you're trying to work and give that a try. Using Group Policy Preferences to create a new printer mapping and set that printer as the default printer fails on Windows Vista and higher clients when the user is logging on for the first time.                 State:   Enabled, Folder Redirection : No, COMPUTER SETTINGS                 Computer Setting:  100, Audit Policy         Disable Offline Files Cloud Help Desk: Incoming email is not creating tickets (updated): Which of the following retains the information it's storing when the system power is turned off?         File Printer Sharing On and remote administration exception                 Source:           \\kav\KLSHARE\Packages\NetAgent_9.0.2786\exec\Kaspersky Network Agent.msi What version of Windows is your print server running?         BUILTIN\Administrators             GPO: Default Domain Policy Loop back can be tricky at times.                 Version:          9.0 I can tell and show with screenshots how you set it up, but there is enough written about that already.         Default Domain Policy         --------------------         Domain Computers         ----------------------------------------         Oh yeah, don't forget to add you x32 and x64 drivers to the print server.             Filtering:  Not Applied (Empty), File Printer Sharing On and remote administration exception                 AutoInstall:      True Group policy is being applied to fslogix profiles but once the group policy parameters is changed the fslogix profile remain with the old policy parameter means group policy not being refreshed and updated to the user. The client has to have the drivers too, or must be admin.         -------------------------- I refer back to it every time I jump through the hoops of setting up printers in GP.                 Computer Setting:  99999, GPO: Default Domain Policy The main difference with Windows 7 clients is that you shouldn't need the pushprinterconnections.exe that the article refers to.     --------------------------------------------------------                 State:   Enabled, GPO: Windows Firewall here is the results.             GPO: Default Domain Policy                 Setting: SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings I sure have.     -------------------------------------------------------------------         Disable Offline Files             Filtering:  Not Applied (Empty), Certificate Deployment There are known issues with printers and Read-Only Domain Controllers, even after SP1 for 2008 R2 and Windows 7. Also to answer your previous question I have 2 DCs. I did have some trouble getting all my printers to add to GPP but with persistence I eventually got all of them added.     -----------------------------         Always wait for network - prevent drive mapping errors         ---------------                 Setting: Software\Policies\Microsoft\Windows\NetCache go to the machines and run "gpupdate /force" or "gpupdate /sync" (/force /sync if need be). Add a new printer on an existing port. Hence why I'm trying to automate as much as possible. Local Profile:               C:\Documents and Settings\testeng             N/A, Account Policies                 Policy:            LockoutDuration The only thing I didn't notice, is that it wasn't in the list of network printers so I'm going to google around on that. when i run gpresult /R i do not see my gpo being applied. The gpo i am testing is all user config, just a simple startup script. Can anyone help? Did you link the GPO to the OU the contain the user account since it is a user setting? This applies even if you are using Item Level Targeting. Copy your edited JSON to a network location and deploy it to your user’s roaming appdata. --------------------------------------------------------------, OS Type:                     Microsoft Windows XP Professional                 AutoInstall:      True                 State:   Enabled, GPO: Certificate Deployment Check to see if you have a Domain root linked GPO with a computer configuration for Loopback Processing. 3.                 LastExecuted: 7:20:25 PM, Shutdown Scripts *** When a downlevel setting is not defined, then the upper level, root setting gets applied. This happens on every gpo that is linked to the ou, i have 4. The only thing that woks 100% for me in the past was passing this on a script (computer GPO, XP clients): rundll32 printui.dll PrintUIEntry /ga /n"\\server\printer". The Network Printer Setup Assistant provides four ways to install printers in the Print Management Console. Administrative Templates.                 Setting: SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile I'm not too worried about supporting our XP clients because in the department I'm testing this GPO out on, they're going to be 100% Windows 7 in the next month or so.         BUILTIN\Users GPPreferences item is linked to West Sales Users OU.                 Policy:            PasswordComplexity                 Policy:            AuditAccountLogon If so that will apply to all users in …             N/A. Any WMI filter will still have to evaluate to true for the object that is processing the GPO. Scenario 2: Universal Printer Driver shared on server in \\DC\HPPRINT1.         Install KAV x64         Local Admin Rights To continue this discussion, please         ------------             GPO: Install Java You will need every driver for each architecture that will connect to the server as well as separate OS drivers such as XP and Win 7.                 Name:             Java(TM) 6 Update 30 I've got it working after the KB patch was installed, gpupdate and reboot.                 Computer Setting:  Not Enabled, GPO: Default Domain Policy It will make things smoother in the long run, Clustered Certificate Service goes Offline When it fails over to the 2nd Node, Are you smarter than most IT pros?         -----------------         NT AUTHORITY\Authenticated Users 4.         ------------------ The following GPOs were not applied because they were filtered out ----- Disable Offline Files Filtering: Not Applied (Empty) Certificate Deployment Filtering: Not Applied (Empty) Local Group Policy Filtering: Not Applied (Empty)         Certificate Deployment         NT AUTHORITY\NETWORK http://kudratsapaev.blogspot.com/2009/07/loopback-processing-of-group-policy.html.         Install KAV x86         ----------------------         Disable Restart on BSOD 2. 0. 50 seconds average for the printers. The client-side extension forces the domain controller locator mechanism to request writable domain controllers only. Using Windows Hello (PIN) on all domain systems, View this "Best Answer" in the replies below », Where do you stack up against other IT pros?                 Setting: SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop                 State:   Enabled, GPO: Enable Remote Desktop                 Policy:            LockoutBadCount Install Windows XP Support Tools 5.         ----------------- OS Version:                  5.1.2600 Right-click that container, and then select Properties. I do not have enforced checked on any gpo. drivers , are the right divers added for the client PC  (32/64bit). Go to “Printers” and select “Add Printer” from the pop-up menu. by Take the Challenge ».     Resultant Set Of Policies for User: I had one XP computer on a site with 4 Win7 machines and 1 Server 2008R2 then i remembered it need the KB patch to get the printer. OS Configuration:            Member Workstation The only solution I have found is to go to the XP box and remove it from the domain, reboot twice, and put it back in the domain. Open the Server Manager console and select to install Print and Document Services role (if not already installed).From Role services list select to install Print Server service.Tip. It's easier and more powerful. Group policy not applying to security group. Also you can install Print Server role with management tools using the following PowerShell command: The first place to check is the Scope Tab on the Group Policy Object (GPO).                 Policy:            ResetLockoutCount         WSUS I use Group Policy File Preferences to do this and I have the preference action set to Update. Domain Name:                 *** I have gotten it to work successfully with group policy preferences, which I see you can configure from your screen shots.                 Source:           \\filesrv\Applications\jre-6u30-windows-i586-s\jre1.6.0_30.msi I had no luck getting printers installed with GP but was able to successfully deploy printers with GP preferences.     Group Policy slow link threshold:   500 kbps, Applied Group Policy Objects I manually installed the driver on the computer and any subsequent users that logged in had the printers deployed automatically.             Filtering:  Not Applied (Empty), Always wait for network - prevent drive mapping errors             Filtering:  Not Applied (Empty), Disable Restart on BSOD                 Deployment State: Assigned Thanks everyone.         System Services         NT AUTHORITY\Authenticated Users             N/A, Public Key Policies This GPO though is NOT applying successfully to Windows 7 machines.         ------------------------                 Policy:            RetentionDays If you are configuring a computer side setting, make sure the GPO is linked to the Organization Unit (OU) that contains the computer. I have also tested installing the driver on a W7 machine by using the UNC path (\\server\printer) which SUCCESSFULLY installs the driver on that W7 laptop. Site Name:                   Default-First-Site-Name The first place to check is the Scope... 2.. Next, check the security filtering.             Filtering:  Not Applied (Empty), Install Kav Agent v9 Its every OU that has a gpo linked to it that has user config.                 Computer Setting:  Not Enabled, GPO: Default Domain Policy         LOCAL         -------------------                 Computer Setting:  Enabled, GPO: Default Domain Policy :).         ---------------- GPRESULT /H doesn't provide any errors about it. http://blogs.technet.com/b/grouppolicy/archive/2009/06/24/gp-preferences-set-a-default-printer.aspx.     Group Policy was applied from:      DC2.         If I do a test with group policy modeling with my test machine and that user the results look like they should, with the policy actually applying. It applies specifically to Server 2003 R2, but the process for publishing printers should be almost identical for Server 2008 and 2008 R2. on         Install Kav Agent v9                 State:   Enabled, GPO: User install print drivers I also recommend enabling a policy in GPO called Point and Print restrictions.         Everyone So setting it to replace loopback basically stops any user configuration gpos from applying?             GPO: WSUS Ok I am having problems with gpo's not applying if they are linked to an ou. Is your printer GPO applied at the domain level? Ok i checked all of my gpos and found 2 that have loopback enabled. The new systems seem to tolerate pushprinterconnections.exe just fine. ask a new question. Another thing is if Group Policy is mapping a local TCPIP printer on a device, make sure server share gives everyone group print access else obscure application warning 4098 for Group Policy Printers – Group Policy Object did not apply because it failed …                 Origin:           Applied Application, GPO: Install Kav Agent v9 Adding Printer Device GUIDs Allowed to Install via GPO.                 Computer Setting:  Success, GPO: Default Domain Policy     ----------------------------------------, Software Installations             N/A, Registry Settings                 Computer Setting:  5, GPO: Default Domain Policy If the GPO containing the preference isn’t applying to the computer/user, then the preference can’t process. Result: ZERO seconds / “Applying Group Policy Printers policy” never appear.             GPO: Local Admin Rights If i link the gpo to the top level domain it works just fine. the merge one is for configuring offline files, which i want to set on a computer basis, the replace one is to add special user account to the local users on the machine.                 State:   Enabled, GPO: Windows Firewall the gpos in question is all user configuration so im not even worrying about the computer side of it.                 Computer Setting:  Not Enabled, Event Log Settings     Last time Group Policy was applied: 3/12/2012 at 1:20:17 PM Mar 12, 2012 at 12:59 UTC.         ---------------                 Policy:            AuditSystemEvents                 Policy:            ForceLogoffWhenHourExpire Use group policy preferences instead.                 Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU If you perform a gpresult on that computer does it show being applied?                 Name:             Kaspersky Endpoint Security 8 for Windows                 Policy:            PasswordHistorySize This topic has been locked by an administrator and is no longer open for commenting. The GP Client in XP can get confused sometimes.                 Computer Setting:  Success, Failure, GPO: Default Domain Policy If you haven't looked it over, refer to the following article:  http://www.windowsnetworking.com/articles_tutorials/Deploying-Printers-Group-Policy-Windows-R2.html.                 State:   Enabled, GPO: File Printer Sharing On and remote administration exception If you are starting with a new GPO (or changing the scope), you still have to ensure that the GPO is linked and filtered correctly. Do you have any "Block Inheritance" enabled on the OU's?     ----------------------------- The problem I ran into was that users didn’t get the printers on Windows 10. Alternately, create a GPO and link it in the appropriate OU, site, users or group and use the "deploy printer" option.                 Version:          8.1 ask a new question.         Everyone I have never gotten a printer to deploy successfully using group policy settings.             Filtering:  Not Applied (Empty), Local Admin Rights                 AutoInstall:      True That said, I've recently added a handful of Windows 7 machines which all picked up the deployed printers without any problems.     Last time Group Policy was applied: 3/12/2012 at 1:20:55 PM Have you installed the Group Policy Preference Client Side Extensions on this Windows XP computer? I just printed to the printer from my computer (it's shared off of the server so I used the drivers that I had installed on the server) and it prints when I manually add it. Printers. The most common issue seen with Group Policy is a setting not being applied.                 Computer Setting:  24, GPO: Default Domain Policy You could also try to reset the computer and domain sync by performing the following on the Windows XP computer. Where %computername% is the computer name of the Windows XP machine and the %domainname% is the DNS name of your domain. Any ideas?                 Computer Setting:  Not Enabled, GPO: Default Domain Policy I don't recommend this.                 Policy:            MaximumPasswordAge                 Policy:            MinimumPasswordLength ------------------             GPO: Disable Restart on BSOD Click the New Group Policy Object icon and create a new GPO for the printer that you want to deploy. Viola, silently installed prints that are painless to deploy. We also use item level targeting for the computer security group to validate against each one.         ---------------- The first thing to check is Event Viewer > Applications. If i do a test with group policy results, the actual esults are not the same. (test it) make sure Windows XP machines have KB943729 installed.     CN=testeng,OU=Engineering,OU=Departments,DC=***,DC=*** i created a gpo - computer policy.                 Origin:           Applied Application, GPO: Install KAV x86 i am looking for ENG MAP O Drive which doesnt even appear, Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0                 Setting: Software\Policies\Microsoft\Cryptography\AutoEnrollment I did notice something though when editing the GPO on my local machine (using Remote Admin Tools) and editing the GPO on the server.             GPO: Default Domain Policy             N/A, File System Settings             N/A, Internet Explorer URLs They're getting replaced very soon.         NT AUTHORITY\INTERACTIVE Their XP machines are 5 years old, if not older and are the oldest computers we have in the company. once you work it out a few times, you know where to look for problems. No error logs that i can see related. The printer is "deployed" when editing locally, but on the DC, it's a blank connection status.                 Policy:            RequireLogonToChangePassword                 Setting: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint                 Source:           \\kav\KLSHARE\Packages\KES_8.1.0.646\exec\Kes8win_x86.msi                 Policy:            EnableGuestAccount If not, it can't install the printer because it have to install drivers and needs admin credentials. Roaming Profile:                 Group Policy was applied from:      DC2. This happens on every machine and I have checked multiple user accounts in multiple OUs. Then using Group Policy Management Console (GPMC.msc) enable blocking of policy inheritance for this container ( Block Inheritance ). I keep getting "Windows failed to apply the Group Policy Printers settings."                 Computer Setting:  Not Enabled, GPO: Default Domain Policy                 Policy:            ClearTextPassword I agree with B-Rad and AEisen. From what i gather, the one with the replace loopback is causing this issue.             N/A, Administrative Templates I've checked the thread here: http://community.spiceworks.com/topic/146630-printer-deployed-by-gpo-not-showing-up?started_from=new_topic and those settings are fixed. Why?         User install print drivers, The following GPOs were not applied because they were filtered out kputzlocher If i cant get this figured out soon I will have to link every gpo to the top level.                 State:   Enabled, USER SETTINGS             Filtering:  Not Applied (Empty), Windows Firewall                                            State:   Enabled, GPO: File Printer Sharing On and remote administration exception                 Version:          6.0 4. by Jan 10, 2012 at 12:49 UTC. In the Local Group Policy Editor, expand the following folders: Computer Configuration. When you run GPRESULT on that machine does it show the computer location in AD?                 Computer Setting:  7, GPO: Default Domain Policy – The user ‘DC Black And White’ preference item in the ‘HP-Printers {02F894A2-03CF-425F-83CA-0E89764D2D2E}’ Group Policy Object did not apply because it failed with error code ‘0x80070bcb The specified printer driver was not found on the system and needs to be downloaded.’ This error was suppressed. Sysprep? Also note that even though I pushed out printers with GPP and installed the correct drivers on the server, the printers did not deploy until I manually installed the driver onto each computer. It’s easy to configure a Group Policy Preference to deploy a printer, but there’s a few gotchas that may prevent the printer from actually getting installed client side..                 Setting: SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint 2. run the following command netdom reset %computername% /domain:%domainname%.                 Name:             Kaspersky Security Center Network Agent Mr. WestSalesUser 1 logs on. The user portion of the policy will only apply to the users if their user account are in or below the OU that the policy applies to.         Enable Remote Desktop         ---------------- They were not allowed to install the driver.                 Policy:            MinimumPasswordAge                 Name:         disablerestartonbsod.bat         ----------------------------                 State:   disabled, GPO: File Printer Sharing On and remote administration exception     CN=WINXPTEST,OU=Desktop,OU=Domain Computers,DC=***,DC=net                 Computer Setting:  N/A, GPO: Default Domain Policy In the denied gpos section under user i dont even see any of the gpos that are linked to the ou, its like they dont exist. The gpresult seems to be the same as the group policy results in the gpmc. If you have further issues, the event log is very helpful in diagnosing errors. This IS the correct driver received from the company.                 Policy:            EnableAdminAccount While you are working in Group Policy Preferences, create an item to delete the Microsoft Teams shortcut that is …         Domain Users Alternately, create a GPO and link it in the appropriate OU, site, …                 State:   Enabled, GPO: Local User Accounts We deploy printers with user preferences, log on times have not been an issue for physical machines, but for VDI’s had to amend this to a log on script because processing the Printers GPO section during log on was taking too long, recent tests show times of approx.                 Computer Setting:  0 run gpupdate /force.         -------------------------- If so, then that setting could trump all downlevel OU user-side settings because all your downlevel OU do not have a Loopback Processing set by default.             GPO: Default Domain Policy set security filtering to my user object and my computer object. It would be easier to remove the computer from the domain and rejoin it back. Connected over a slow link? Make sure you have the correct drivers installed on the server. configure your group policy with the connection.                 State:   disabled, GPO: Default Domain Policy                 Setting: Software\Policies\Microsoft\Windows\WindowsUpdate This topic has been locked by an administrator and is no longer open for commenting. I am not sure if this was something I did wrong or if this is just the way it is. Still, printers are not being deployed. We have around 750 printers in 1 GPO using User Configuration each with a create and an update to install and set default.                 Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU type the name of the printer … Result: 29 seconds for the CLIENT to show “Applying Group Policy Printers policy”… then MOVE ON. You only need to set the printer driver install options in the GPO to Elevate without prompting for both settings. The most common issue with Group Policy is a setting not being applied.     ------------------------------------, Software Installations I used to be on a windows 2003 domain and these worked fine, but since I upgraded to windows 2008 domain it seems to have broken something. As you can tell, it takes around 2 minutes on Applying Group Policy Printer Policy before moving forward. So i know its not related to one machine or one ou. See http://support.microsoft.com/kb/231287. share printer (if it hadn't been done) and connect it on a client computer. This person is a verified professional. configure your group policy with the connection. 1.                 Computer Setting:  Success, GPO: Default Domain Policy         Main_ENG                 Setting: Software\Policies\Microsoft\Windows NT\CurrentVersion\Winlogon He doesn't want to reimage the computer?                 State:   Enabled, GPO: WSUS Type a name for the new Group Policy Object (e.g.         BUILTIN\Users When you remove the computer, the computer object isn't deleted from AD, so it will go right back in to the same OU. Copyright (C) Microsoft Corp. 1981-2001, RSOP results for ***\testeng on WINXPTEST : Logging Mode         Local User Accounts                 Setting: SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules You can check the Group Policy log of your Windows 7 machines here: Event Viewer > Application and Services Logs > Microsoft > Windows > Group Policy, Any detailed errors for group policy deployment would be in userenv.log, which you would have to enable on the client computer receiving the policies, http://technet.microsoft.com/en-us/library/cc739088%28WS.10%29.aspx, Do you have any Read-Only Domain Controllers in your environment?                 Setting: SOFTWARE\Policies\Microsoft\WindowsFirewall                 State:   Enabled, GPO: User install print drivers 10 Common Problems Causing Group Policy To Not Apply 1.. Network printer driver install for non-admins running Win7 and no print server. Not all settings in Printing Defaults applying to clients. gpresult shows the GPO being applied. I get the same issue with windows 7 anyways.                 Deployment State: Assigned     ------------------------------------------------------------------- Add a TCP / IP printer or web service by IP address or hostname. -------------- Try running RSOP.msc from the command prompt.                 Setting: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services             N/A, Internet Explorer Connection Clustered Certificate Service goes Offline When it fails over to th... http://www.windowsnetworking.com/articles_tutorials/Deploying-Printers-Group-Policy-Windows-R2.html, install printer on server with drivers (32/64 bit), share printer (if it hadn't been done) and connect it on a client computer.             N/A, Security Options I created a policy regarding user configuration that blocks the user from changing the desktop background.     Resultant Set Of Policies for Computer: Tested on both xp and windows 7. That said, if you have any remaining XP clients, you'll need it for the clients to connect the printers successfully.             Filtering:  Not Applied (Empty), The computer is a part of the following security groups: Group Policy Not Being Applied?         WINXPTEST$                 State:   Enabled, GPO: WSUS Is the user and computer account located under the OU? I'll modify our GPO tonight and try it out tomorrow and report back. Start with the Scope.                 Deployment State: Assigned It depends on whether your deploying it in the user configuration as a shared printer (which points it to a print server) or deploying it in the user or computer configuration as an IP printer (which makes it independent, but needs to get the drivers from somewhere), However, I believe that's a conversation for a new topic, and not this one. Select the Group Policy tab, and then select New to create a new Group Policy setting.     Group Policy slow link threshold:   500 kbps, Applied Group Policy Objects         ------------------------         ------------------                 Setting: Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint You can easily test your WMI filters by using the WMI Filter V… This issue occurs because the client-side extension that is responsible for applying the GPO does not consider an RODC an acceptable target for performing queries in Active Directory. Furthermore the only way to get these gpos to actually work is to link them to the top level domain.             Filtering:  Not Applied (Empty), WSUS WMI, which allows conditional processing, tends to be a culprit as well.                 Setting: Software\Policies\Microsoft\Office\11.0\Outlook\RPC the user is in the ou, the computer is not. Ditch the policy setting and configure it in group policy preferences.                 Groupname: ***\LocalAdmins Right click on the Printer that you want to deploy and select Deploy with Group Policy. applied the gpo to the OU where my computer/user are located. one is set to replace and the other is set to merge. Just remember WinXp and Vista need the group policy preferences optional Windows Update for the to work. Have you tried to create a new GPO with basic settings, assign it to that OU and see what happens?