youngjforge
New Member.
419 views

GPO Effective But No Printer?

This is only a loosely-based ZCM11 Forum question in that we're trying to use a Windows GPO natively (versus via ZCM) in deploying this certain printer. I've also posted in iPrint forum. We do run ZCM but I wouldn't think it would be necessary in this case.

We're trying to publish a Microsoft printer GPO deployment policy to domain computers (all of our eDir/iPrint workstations are joined to a Microsoft Domain). We're pushing the policy via Computer Configuration and NOT User Configuration. The GPO policy is effective when logging in Computer Only and authenticating the user to the Microsoft domain in question. However, a subsequent Novell Client authentication/session thwarts this printer GPO policy from somehow taking full effect and does not retain the printer in question even though it successfully installed in prior non-eDir sessions on the same machine. Strangely, GPRESULT shows the policy in effect, but no printer materializes.

Using the Advanced Tab - Windows Login and choosing the proper domain in the From field, does not succeed either. Appreciate any insight anyone has on this when operating in this type of hybrid platform.


Reply With Quote Reply With Quote .

--------------------------------------------------------------------------------
Labels (2)
0 Likes
3 Replies
Micro Focus Expert
Micro Focus Expert

Re: GPO Effective But No Printer?

"Using the Advanced Tab - Windows Login and choosing the proper domain in the From field"

Make sure you are ACTUALLY logging into the Domain.
If DLU Policies are in place, they will force a "Local Non-Domain" logon regardless if what is entered there.
Quite possible the AD Printer may require a Domain User to be logged on to use the Domain Printer.
--
Please give a hearty thumbs up to any post you find helpful!
To find articles by Craig Wilson simply follow the link: Craig Wilson's Tips!
0 Likes
youngjforge
New Member.

Re: GPO Effective But No Printer?

Thanks Craig! Do you think that if we properly configured the Microsoft GPO to be truly Computer Settings-based versus User-based that the DLU's would still defeat this Microsoft GPO despite the workstations being joined to the Microsoft domain?

Also, could ZCM somehow facilitate this Computer authentication through its own use of GPO implementation?
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: GPO Effective But No Printer?

#1 - I don't know what is going on, I'm just making some educated guesses.
#2 - It would not really be "Defeating" but perhaps "Enforcing the GPO"

By the sounds of it, DLU is in play.
I would start by disabling DLU on the test device to see if that resolves the issue.
If it does, test by creating a Local Windows Account on the PC and logging in with that account instead of into the domain....it should give the same results as DLU.

In that Case, you would need to ask on the MS Forums how to configure the Printer/GPO so that Local Accounts have access to the printer.
It may involve access rights to the printer being set to "Anonymous" or something similar.

Novell/ZCM Code should not really be in play impacting this at all beyond the fact it facilitates a Local Account Logon vs A GPO Logon.
The issue then becomes why the MS Printer/GPO do not work for Local Accounts.....But that is all outside of ZCM's realm.

Note: Also make sure you are not also deploying any GPOs via ZCM. They are not aware of AD GPOs and may negatively impact them. Perhaps that is a factor if it turns out that it is not simply an issue of Domain vs Local Users having printer access.
--
Please give a hearty thumbs up to any post you find helpful!
To find articles by Craig Wilson simply follow the link: Craig Wilson's Tips!
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.