We used to locally install hundreds of printers on thousands of computers, and now looking for a way to improve and automate the process as much as possible. A method was suggested to us by another sister company which was to setup print server and AD security groups for each printer and add computer objects to appropriate printer's security group and bind the printer on the print server to the security group with Group Policy. So if you add the computer object in AD to the printer's security group, it'll install on the computer by Group Policy.
The issue with this approach is when you want to remove a printer, you'd have to locally remove the printer from the computer and also remove the computer object from the security group, and if you don't wait for the security group to replicate before locally removing the printer from the computer, Group Policy will add it back again.
So now, what are the other ways that we could consider setting up printers and computers to be seamless and with less management from the Server or Desktop Support teams?
