question

GoranPoposki-1119 avatar image
0 Votes"
GoranPoposki-1119 asked GoranPoposki-1119 answered

Create a GPO printer for a specific security group

I need help in assigning a specific printer to a certain security group

I've done all that is asked here, but still, the printer shows up for ALL users in the domain.
http://woshub.com/deploy-printers-to-users-gpo/

I've created the GPO, and implemented item-level targeting, but no luck so far :(

If I select a specific security group in Scope, the printer doesn't show up at all.



windows-active-directorywindows-group-policy
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered FanFan-MSFT commented

Hi,

When you add the group into the scope on the GPO, did you give them the read and apply group policy permission under the delegation?
At the same time users in the group are also in the USERS OU, right?
93221-5031.jpg
Also, computers which the user account logon should be also added and have the read permission.

We should also confirm if there are any other GPOs which deployed the same setting.
You can run command: gpresult /h userreport.html to check all the settings for the users.




5031.jpg (106.6 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Yes, the users are in the OU.
And they're added correctly in the scope.

But I want specific users to have the specific printer, regardless of what pc they use.


0 Votes 0 ·

Hi,
Yes, the user configuration is what you needed.
User Configuration in Group Policy is applied to users, regardless of which computer they log on to.
When you deploy a user configuration, users or groups which will apply the policy should have the read permission and apply group policy permission. And computers should have the read permission on the GPO.
Best Regards,

1 Vote 1 ·
Thameur-BOURBITA avatar image
0 Votes"
Thameur-BOURBITA answered GoranPoposki-1119 commented

Hi,

You can add this group in GPO Security filtering on settings:


93051-image.png




Please don't forget to mark helpful reply as answer


image.png (408.9 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I;'ve added the group, but the printer still shows for ALL authenticated users, no matter what security group they're in.

Furhter more, on other printers it says I cannot remove them due to security restrictions, but this one I can remove without problem...

Any help would be more than appreciated...

0 Votes 0 ·
GoranPoposki-1119 avatar image
0 Votes"
GoranPoposki-1119 answered FanFan-MSFT commented

NO LUCK

I have Item targeting for SecGroup1, for the specific printer in the GPO.
If I put Authenticated Users and SecGroup1 in Scope, I get the printer for all authenticated users, regardless.
If I delete Authenticated users and leave just SecGroup1 - i get nothing - no printer for the SecGroup1

Any other suggestions?!?

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
If I delete Authenticated users and leave just SecGroup1:
Rember to give the SecGroup1 read permission and apply group policy permission. And computers groups into the scope and give computers groups read permission on the GPO.

Best Regards,


1 Vote 1 ·

Hi,
Welcome to share your current situation if there are any updates.
Please feel free to let us know if you need further assistance.
 
Best Regards,

1 Vote 1 ·
GoranPoposki-1119 avatar image
0 Votes"
GoranPoposki-1119 answered

Thank you - the problem seems to be solved.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.