Slipeer's questions

I'm looking for a way to configure all of Windows clients in Active Directory domain so that they print all documents in duplex mode.

Serverfault has been similar questions:

• How do i enforce duplex printing on Server 2012
• Printer Preference Defaults - Duplex Printing

But:

• In my case, a lot of different printers (about 1000 at one site) and more customers.
• Not all printers connected via Print Servers (in some cases directly connected printers)
• Print job rendering always done on the client computers (otherwise will be long delays when printing)

What is tried:

• Сhanging the default print settings in the print server had no impact on the print settings from workstations where the printer has already been connected.

It is possible to change a user's login shell to a different then explorer.exe in the user's registry (HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell). For example we can setup it to explore.exe -k serverfault.com and the user can view in kiosk mode only this site.

However, this configuration is done in the user's profile and there is only on the computer where it is made (roaming profiles unfortunately can not be used in my case).

In the Linux world, while creating user has the ability to set login shell.

I'm looking for an opportunity to realize such in Window sdomain: set a domain user login shell in an active directory to the setting earned on all Windows computers in the domain.

Accepted any ideas. Roaming profiles are not available unfortunately.

UPD. I thought about setting a registry key of the user through the GPP, but:

1. I'm not sure how it works when user first log
2. After the MS16-072 update, there are some problems with the Group policy security filtering only to specific users.

Is it possible Active Directory domain completely deny printing of documents from any workstations and servers to some user group using Group Policy or another way?

It is important that:

• the prohibition must apply to the user (another user on the same computer must be able to print).
• the prohibition must works, even if the user's PC has a locally connected printer.
• it must be able to quickly enable or disable the user to print, by changing its membership in the domain group.
• some printers are connected to users' computers via USB

I am looking for a tool that would be able to scan hosts for working on them iсmp tunnel server. For example ptunnel.

I want to check hosts for which there is a lot of suspicion outgoing pings from my network. I want to make this check automatically (as I will implement - is another question).

Nobody faced with such a tool?

We are deploying Windows 10 1607 across our company and we are currently having an issue with printers not redirecting over Remote Desktop to a Windows 2012 R2 server:

1. Printing crashes the RDP client.
2. The session remains disconnected on the Terminal Server.
3. The broken print job remains in the print queue.

Older clients (Windows 7) work fine with the same server.

Disabling Easyprint fixes the problem with Windows 10, but is not a complete solution: we have many different printer models from different vendors; we need to make EasyPrint work.