We have deployed printers from our Windows print server using Group Policy (Per-User GPO):
When we choose "Remove" in the Window above, we receive a message that removal was successful, and we no longer see the deployed printer listed in the GPO. However, the printer is not being removed from the client workstations as expected.
When we try to use Group Policy Preferences to delete the printer, we receive an "Access Denied" error on the workstation:
Based on that screenshot, it looks like the the user account is "SYSTEM", is that right? Why would SYSTEM account be denied access to delete a printer?
Some other odd behavior:
If user is a member of Administrators group on the PC, they cannot delete the printer and receive a message that a policy is preventing it.
Only the local administrator account is able to manually delete the printer. However next time the user logs in, the printer is back
The printer is not shown when running Get-Printer in powershell, using elevated or non-elevated rights (but the printer is still listed in Devices and Printers)
Any thoughts on what could be stopping us from deleting these printers?