PRN: Printing Group Policies


PRN: Printing Group Policies



Description: 

Active Directory printer-related settings can be enabled or disabled by using Group Policies. All Group Policy settings are contained in Group Policy objects that are associated with Active Directory containers (Sites, Organizational Units, and Domains), thereby maximizing and extending Active Directory. You also have the ability to publish printers using Active Directory. This article will discuss typical steps to troubleshoot issues with Printing Group Policy issues.

Scoping the Issue: 

To help understand the issue, we need to know the following:

1. When did the problem start?
2. When did the problem occur last?
3. What changed before the problem started?
4. What is the frequency of the problem?
5. What steps can you take to reproduce the issue?

Data Gathering: In all instances, collecting either MPS Reports with the General, Internet and Networking, Business Networks and Server Components diagnostics, or a Performance-oriented MSDT manifest must be done.  Additional data required may include the following:


If you are running Windows Vista, Server 2008 or Windows 7, then you will need to run the Microsoft Support Diagnostic Tool (MSDT) instead. If you have a Premier contract, you will see the option to run MSDT when you open a case online through Microsoft Premier Online. If you do not have a Premier contract, you can run MSDT on the system by opening the case online. To do this, visit the following Microsoft Web site:

http://support.microsoft.com/gp/assistsupport



1. A GPRESULT log from the client. Open a command prompt and type the following:
GPRESULT /Z > results.txt
This will create a text file named ‘results.txt’ that you can send to us.


2. Verify the printer publishing requirements are met:
KB 246269 Requirements for proper function of the Directory Services Printer Pruner in an enterprise
http://support.microsoft.com/default.aspx?scid=kb;EN-US;246269

3. Ensure the SELF account is added to the Machine object of the Print server in AD Users and Computers. The SELF account should have the following permissions:



  • Create All Child Objects



  • Delete All Child Objects



  • Validated Write to DNS Host Name



  • Validated Write to service principal name



  • Read Personal Information


  • Write Personal Information

4. If the Print Server is a Cluster, re-create the Cluster service account to make sure it has the appropriate permissions:

KB 269229 How to manually re-create the Cluster service account
http://support.microsoft.com/default.aspx?scid=kb;EN-US;269229

5. If published printers Are missing:


  • Launch Gpedit.msc on the Print Server.

  • Navigate to Computer Configuration / Administrative Templates / Printers.

  • Configure the Allow Pruning of Published Printers policy to Disabled.

  • Refresh group policy by using gpupdate /force

  • Use the SetPrinter.exe Resource Kit utility to re-publish all printers.

Examples of Setprinter syntax are:

Setprinter <\\servername> 7 “dwAction=unpublish”

Setprinter <\\servername> 7 “dwAction=republish”

6. If the Print Server is a Cluster, perform steps 1-4 (above) on each node and step 5 for each virtual print resource.


Resource Information:

KB 234270 Using Group Policies to Control Printers in Active Directory
http://support.microsoft.com/default.aspx?scid=kb;EN-US;234270

300896 Windows 2000 Cluster Service Does Not Publish Clustered Printers
http://support.microsoft.com/default.aspx?scid=kb;EN-US;300896
286254 Cannot Publish a Printer to Active Directory from a Cluster
http://support.microsoft.com/default.aspx?scid=kb;EN-US;286254

246906 Printer Pruner May Prune All the Print Queue Objects on Its Site
http://support.microsoft.com/default.aspx?scid=kb;EN-US;246906
246269 Requirements for proper function of the Directory Services Printer Pruner in an enterprise
http://support.microsoft.com/default.aspx?scid=kb;EN-US;246269

246174 Printer Pruner May Not Remove Printer Queue Objects from Active Directory
http://support.microsoft.com/default.aspx?scid=kb;EN-US;246174

234270 Using Group Policies to Control Printers in Active Directory
http://support.microsoft.com/default.aspx?scid=kb;EN-US;234270