Deploying Printers with Group Policy using security filtering

I've always wanted to allow a user to have a printer no matter where they login. 

The steps below will show you how to achieve just that. 

That is deploy printers automatically with group policy and then using security filtering to only deploy the group policy to members of a particular security group.

To follow these steps I will be assuming that you have already setup a windows print server.
In the example below I have added used a windows 2003 virtual server in a 2003 AD Domain. 

1. Install the printer on the print server as you would any other network printer.
2. Create a new global group that will be given access to the GPO and thus the printer
3. Then create your GP object:
• Create a new GP object with appropriate name
• Go to User Configuration – Windows Settings – and open Logon
• Click on showfiles (Fig 1)and copy the file pushprinterconnections.exe into there (52KB)
  



Figure 1

• Then click add and on script name type in pushprinterconnections.exe  (Fig 2) and click OK



Figure 2

4. Giving appropriate access:
1. In the GPOE select the OU the GPO is under and expand on the left until you can click on the GP (fig.3)



Figure 3

2. On the right hand side on the scope tab look below to see Security Filtering
1. Remove "Authenticated Users"
2. Add the global group you want to give access to the Group Policy
5. Deploying the printer on the print server:
1. In the printer management console right click the printer and click Deploy via group policy(fig 4)



Figure 4




Click Browse and navigate to your newly created GPO  (Fig .5)






Figure 5

2. Select so that the GP only applies on the (per user) (Fig .6)



Figure 6

3. Select so that the GP only applies on the (per user) 
4. Click Add
6. You should get a screen that says the printer has been successfully deployed
7. Reboot once or twice and your printer will be installed automatically wherever you logon.