Group policy install printer

However, this approach is extremely inconvenient in terms of the IT department, because it requires Support-team intervention when a user tries to install a new printer driver. You can allow non-administrator users to install printer drivers on their Windows 10 computers without the need to grant local Admin permissions using Active Directory Group Policies.

At first, create a new or edit an existing GPO object policy and link it to the OU AD container , which contains the computers on which is necessary to allow users to install printer drivers use the gpmc. You can implement the same settings on a standalone non-domain computer using the Local Group Policy Editor gpedit.

Find the policy Devices: Prevent users from installing printer drivers. Set the policy value to Disable. Then you can set the policy value to Disable, any unprivileged user can install a printer driver as a part of a shared printer connection to a computer. However, this policy does not allow downloading and installing an untrusted not-signed printer driver. The next step is to allow the user to install the printer drivers via GPO.

Enable the policy and specify the device classes that users should be allowed to install. Click the Show button and in the appeared window add two lines with device class GUID corresponding to printers:. When you enable this policy, members of the local Users group can install a new device driver for any device that matches the specified device classes. In Windows 10 there is another feature related to the UAC User Account Control settings, which occurs when you try to install a shared network printer.

If the UAC is enabled, a message appears in which you want to specify the credentials of the Administrator. To solve this problem, you need to disable the policy Point and Print Restrictions.

Using the Domain Browser, you need to locate the OU organizational unit on which you want to deploy the printer, and then click Create a New Group Policy Object button.

Enter the policy name and click Ok. You can assign the created policy to domain users, computers, or both. Press the Add button in order to add your shared printer to the GPO. Check the current policy settings by going to the Settings tab. This path should contain the name of your print server. Next, you need to verify if a new shared printer HP LaserJet M appeared in the list of connected printers.

To increase the speed of processing and the applying of Group Policy, disable the use of computer settings on the Details tab Computer Configuration settings disabled.

This policy allows users to connect printers not only from the print server, but also to configure the printing of documents from users directly to a network printer. In this case, the policy settings specify the IP address or device name of the printer, and the print server from which the computer can install the driver.

You can use AD security groups to more accurately target printers to users. Create a new group in AD for example, mun-managers-hp , and add all users whom you want to assign this printer to this group. The default isn't selected, which means no customized support URL. Computer Location: Specifies the default location criteria that are used when searching for printers. This setting is a component of the Location Tracking feature of Windows printers. To use this setting, enable Location Tracking by enabling the Pre-populate printer search location text setting.

When Location Tracking is enabled, the system uses the specified location as a criterion when users search for printers. The value that you type here overrides the actual location of the computer that is conducting the search. Type the location of the user's computer. When users search for printers, the system uses the specified location and other search criteria to find a printer nearby.

You can also use this setting to direct users to a particular printer or group of printers that you want them to use. Directory pruning interval: The pruning interval determines the period of time that the pruner sleeps between checks for abandoned PrintQueue objects.

The pruner reads the pruning interval value every hour. Directory pruning retry: Sets the number of times that the PrintQueue pruner tries to contact the print server before it deletes an abandoned PrintQueue object. Directory pruning priority: Sets the thread priority of the pruning thread. The pruning thread runs only on domain controllers and is responsible for deleting stale printers from the directory.

The default value is 0. Disallow installation of printers using kernel-mode drivers: Determines whether printers that use kernel-mode drivers may be installed on the local computer. Kernel-mode drivers have access to system-wide memory. Therefore, poorly written kernel-mode drivers can cause stop errors. Log directory pruning retry events: Specifies whether to log events when the pruning service on a domain controller tries to contact a computer before it prunes the computer's printers.

The pruning service periodically contacts computers that have published printers to verify that the printers are still available for use. If a computer doesn't respond to the contact attempt, the attempt is retried a specified number of times, at a specified interval.

The Directory pruning retry setting determines the number of times that the attempt is retried. The default value is two retries. The Directory Pruning Interval setting determines the time interval between retries. The default value is eight hours.

If the computer hasn't responded by the last contact attempt, its printers are pruned from the directory. Pre-populate printer search location text: Enables the physical Location Tracking setting for Windows printers. Use Location Tracking to design a location scheme for your enterprise and assign computers and printers to locations in the scheme. Location Tracking overrides the standard method that is used to locate and associate computers and printers.

The standard method uses a printer's IP address and subnet mask to estimate its physical location and proximity to computers. If you enable this setting, users can browse for printers by location without knowing the printer's location or location naming scheme. By default, if you enable the Group Policy Computer location setting, the default location that you entered appears in the Location field.

Printer Browsing: If you enable this setting, the print subsystem announces shared printers for printer browsing. Disable this setting if you don't want the print subsystem to add shared printers to the browse list.

If this setting isn't configured, shared printers aren't added to the browse list if a Directory service is available. By deploying a printer via the Group Policy, you will gain time because you do not need to install the printer drivers to each workstation separately and you will make your life easier when managing the printer, because all the changes at the printer settings can be made at one place on the server's side.

Additionally, you will ensure that all the network computers will use the same printer driver and the same printer settings. First of all install the network printer on Server You can install the printer, either on AD server or at any other server that belongs to your domain. At the next screen, type the Printer's IP address and click Next. Then proceed to install the drivers for the printer. When you complete with the printer installation, check the Share this printer box, type a share name for the printer and click Apply.

When done, click OK and then proceed to the next step. Right click on the Printer that you want to deploy and select Deploy with Group Policy. Type a name for the new Group Policy Object e.