I was wondering if anyone could possibly lend a hand?
We have eight printers across two sites. I would like all the users in OU1 (Site 1) to have printers 1,2,3 and 4 and all users in OU2 (Site 2) to have printers 5,6,7 and 8.
Printers 1 and 4 in OU1 and printers 5 and 8 in OU2 are colour.
Printers 2 and 3 in OU1 and printers 6 and 7 in OU2 are black and white.
However, we only have two printing AD groups (print_colour and print_black_and_white).
We have 25 Active Directory ‘role’ groups. Each user belongs to one role group, which is a member of all the various AD groups required for their job role. The role groups are members of ‘print_colour’ and ‘print_black_and_white’ however, the AD role groups are not site-specific, so we can only use the two OUs to separate the users geographically.
Ideally what I would like to do is to have each user log on and have just the four printers at their site mapped via a logon script. I’m guessing it would be something along the lines of:
“If the user is a member of this OU and their role group is a member of this printing group, give them printer w,x,y and z”
I won’t be able to make any changes to (or add) any Active Directory groups.
Hope this makes sense.
Can anyone suggest a way of achieving this logon script with Powershell?
Thanks in advance.