Active Directory Assistance

[ALI]

We're novices at AD set up.

We want to set up printers under the AD structure.
The "Printers" wizard is self-explanatory; however, we are
using print servers (i.e. HP jet directs) that use TCP/IP
protocol. We realize that drivers must be manually
installed on all PC's but what is the best way to deploy
through AD?

One further question -- what is the best procedure for
password administration? (administrator maintain a list
of passwords and provide a new password to the end-user or
would it be more advantageous to allow the user to set
their own password (as long as AD has a GPO set up with
restriction limitations)?

Thanks for your help!

 

[Simon Geary]

You can assign the printers using a printui.dll command in a Group Policy
logon script.

Tip: TCP\IP printers are treated as local printers, not network printers.
When using printui.dll you therefore need the /l switch, not /n
http://support.microsoft.com/?id=189105

Give users a default password and force them to change password at next
logon so they can specify their own. Never keep a list of users passwords
anywhere, not even with trusted administrators or in a big safe.

 

[Stefan Buchman]

Hi there,

The correct way to handle the printers is to set them up an a print
server. This could be a file server or depending on how many boxes
you have your AD server. From there use the HP Point-and-Print bundle
drivers this will install all the OS drivers you need so you don't
have to go to each desktop and install drivers.

Once done share the printer filling in information for Location and
description. Check the box that says publish in AD and you're all
set.

As for passwords, you're better off not keeping a list of passwords.
The best way to handle this is to set your domain policies to expire
passwords and require specific password strength then have the users
manage their own passwords.

- Stefan