I've been testing out using GPP to deploy printers to two 2008R2 servers in our Remote Desktop farm. We have a 2008R2 print server, which I have set up all of our printers on (18 printers total). I've created a new GPO to deploy the printers and used ILT to specify the specific user groups that have access to each printer in a single GPO policy. This part seems to be working well.
The problem I run into is when I move a user from one security group to another, the printers in their old security group still show up in the Printers window, but they have a yellow "!" and can't be accessed.
I have tried the following methods to clean out these "ghost" printers (none of which have worked):
- Check the box in the common tab for "Remove this item when it is no longer applied".
- Create a new shared printer with the same name, but set it to delete, and set ILT for anyone not in the specific group for this printer (and modified the order to put this on top)
- Create a new local printer with the same name, but set it to delete, and set ILT for anyone not in the specific group for this printer (and modified the order to put this on top)
- Create a GPP registry setting to delete the "HKCU\Printers\Connections\,,SERVER,PRINTER" and set ILT for anyone not in the specific group for this printer
So far the only way I have found to remove these ghost printers:
- Have the user manually right-click and remove them
- Use a logon script of reg del "hkcu\Printers\Connections" /f
The registry script is a way to automate it, but if I delete these every time a user logs on or off, it increases their logon time because GPP has to setup their printers from scratch.
Any ideas? In the past I have just installed the printers locally as TCPIP on each server, but I would like to automate this with GPP for better scalability as we roll out new terminal servers.