windows server 2003 printing: advanced deployment concepts tim lytle program manager windows...
TRANSCRIPT
Windows Server 2003 Printing:Windows Server 2003 Printing:Advanced Deployment Advanced Deployment ConceptsConcepts
Tim LytleTim LytleProgram ManagerProgram ManagerWindows Printing and ImagingWindows Printing and Imaging
AgendaAgenda
Client/Server InteroperabilityClient/Server Interoperability Fundamental Printing ComponentsFundamental Printing Components Printer Driver ArchitecturePrinter Driver Architecture Point and PrintPoint and Print Increasing InteroperabilityIncreasing Interoperability
Active Directory and PrintingActive Directory and Printing Clustered Print Server – Best PracticesClustered Print Server – Best Practices ReferencesReferences
Client/Server Interoperability Client/Server Interoperability Windows Point and PrintWindows Point and Print
Windows network printing infrastructure that provides Windows network printing infrastructure that provides automatic distribution of drivers and settingsautomatic distribution of drivers and settings Driver stackDriver stack Printing defaults and printing preferencesPrinting defaults and printing preferences RPC (True-connects) versus SMB (Windows 9x-style)RPC (True-connects) versus SMB (Windows 9x-style) Stack drivers dependent on client OSStack drivers dependent on client OS
See See http://www.microsoft.com/printserverhttp://www.microsoft.com/printserver for the for the Point and Print Technical Overview whitepaperPoint and Print Technical Overview whitepaper
Client/Server Interoperability Client/Server Interoperability Point and Print Driver StacksPoint and Print Driver Stacks
Secondary Driver Secondary Driver (Kernel-Mode)(Kernel-Mode)
Secondary Secondary Driver Driver
(Windows 9x)(Windows 9x)
Primary Driver = User-ModePrimary Driver = User-Mode
ClientClient
Windows 2000 or Windows Server 2003
Set
ting
s S
hare
d
Client/Server Interoperability Client/Server Interoperability Point and Print Driver StacksPoint and Print Driver Stacks
Secondary Driver Secondary Driver (Kernel-Mode)(Kernel-Mode)
Secondary Secondary Driver Driver
(Windows 9x)(Windows 9x)
Primary Driver = User-ModePrimary Driver = User-Mode
ClientClient
Driv
er
Set
ting
s
Windows 2000/XP ClientWindows 2000/XP Client
Set
ting
s S
hare
d
Windows 2000 or Windows Server 2003
Client/Server InteroperabilityClient/Server InteroperabilityPoint and Print Driver StacksPoint and Print Driver Stacks
Secondary Driver Secondary Driver (Kernel-Mode)(Kernel-Mode)
Secondary Secondary Driver Driver
(Windows 9x)(Windows 9x)
Primary Driver = User-ModePrimary Driver = User-Mode
ClientClient
Driv
er
Set
ting
sWindows NT 4.0 ClientWindows NT 4.0 Client
Set
ting
s S
hare
d
Windows 2000 or Windows Server 2003
Client/Server Interoperability Client/Server Interoperability Point and Print Driver StacksPoint and Print Driver Stacks
Secondary Driver Secondary Driver (Kernel-Mode)(Kernel-Mode)
Secondary Secondary Driver Driver
(Windows 9x)(Windows 9x)
Primary Driver = User-ModePrimary Driver = User-Mode
ClientClient
Driv
er
Windows 9x ClientWindows 9x Client
Set
ting
s S
hare
d
Windows 2000 or Windows Server 2003
Client/Server InteroperabilityClient/Server InteroperabilityPoint and Print Driver StacksPoint and Print Driver Stacks
Secondary Driver Secondary Driver (Kernel-Mode)(Kernel-Mode)
Secondary Secondary Driver (Win9x)Driver (Win9x)
Primary Driver = User-ModePrimary Driver = User-Mode
ClientClient
Driv
er
Set
ting
s
Win2k/XP ClientWin2k/XP Client
Driv
er
Set
ting
sNT4 ClientNT4 Client
Driv
er
9x Client9x Client
Set
ting
s S
hare
d
WindowsWindows 9x 9x
WindowWindowNT 4NT 4
Windows Windows 20002000or XPor XP
Primary Driver = Primary Driver = Kernel-ModeKernel-Mode
Secondary Secondary Driver (Win9x)Driver (Win9x)
ClientClient
Driv
er
Set
ting
s
Driv
er
Set
ting
s
Driv
er
Win 9xWin 9xNT4NT4Win2kWin2kor XPor XP
Windows 2000 or Windows Server 2003 Windows 2000 or Windows Server 2003
Client/Server InteroperabilityClient/Server InteroperabilityObtaining the highest level of Obtaining the highest level of compatibilitycompatibility Evaluate the client OS installed baseEvaluate the client OS installed base Understand driver compatibilityUnderstand driver compatibility Methods to increase interoperabilityMethods to increase interoperability
Use complete Point-n-Print stack from IHVUse complete Point-n-Print stack from IHV Use PostScript driversUse PostScript drivers Use Kernel Mode driversUse Kernel Mode drivers
Deployment planning and sequenceDeployment planning and sequence Coordinate client and server upgradesCoordinate client and server upgrades
Minimize transitional period if possibleMinimize transitional period if possible
Active Directory And Active Directory And Printing With Printing With Windows Server 2003Windows Server 2003
Windows ServersWindows Servers
ActiveActiveDirectoryDirectory
Computer ObjComputer Obj
Printer1Printer1 --attributes--attributesPrinter2Printer2 --attributes--attributesPrinter3Printer3 --attributes--attributes
Publish SharedPublish SharedPrintersPrinters
Active Directory And PrintingActive Directory And PrintingOverviewOverview
Windows ServersWindows Servers
ActiveActiveDirectoryDirectory
Publish SharedPublish SharedPrintersPrinters
Windows ClientsWindows Clients
Search for PrintersSearch for Printers
Active Directory And PrintingActive Directory And PrintingOverviewOverview
Computer ObjComputer Obj
Printer1Printer1 --attributes--attributesPrinter2Printer2 --attributes--attributesPrinter3Printer3 --attributes--attributes
Windows ServersWindows Servers
ActiveActiveDirectoryDirectory
Publish SharedPublish SharedPrintersPrinters
Windows ClientsWindows Clients
Search for PrintersSearch for Printers
Make PrinterMake PrinterConnectionsConnections
Active Directory And Printing Active Directory And Printing OverviewOverview
Computer ObjComputer Obj
Printer1Printer1 --attributes--attributesPrinter2Printer2 --attributes--attributesPrinter3Printer3 --attributes--attributes
Windows ServersWindows Servers
ActiveActiveDirectoryDirectory
Publish SharedPublish SharedPrintersPrinters
Windows ClientsWindows Clients
Search for PrintersSearch for Printers
Make PrinterMake PrinterConnectionsConnections Search OptionsSearch Options
Capabilities (color, ppm)Capabilities (color, ppm)Printer Name (HP Laser)Printer Name (HP Laser)Location US/SEA/27Location US/SEA/27
> Manually Type> Manually Type> Compare Client Subnet to > Compare Client Subnet to Subnets Location StringSubnets Location String> Use Location string pushed> Use Location string pushedto computer by Group Policyto computer by Group Policy
Active Directory And Printing Active Directory And Printing OverviewOverview
Computer ObjComputer Obj
Printer1Printer1 --attributes--attributesPrinter2Printer2 --attributes--attributesPrinter3Printer3 --attributes--attributes
Active DirectoryActive DirectoryStandard publishing behaviorStandard publishing behavior
Printers represented in AD as printQueue objectsPrinters represented in AD as printQueue objects printQueueprintQueue object resides in the computer container object resides in the computer container
Contains subset of all printer information Contains subset of all printer information Write-onlyWrite-only Updated only through changes directly to the printer objectUpdated only through changes directly to the printer object Writes done in background – may not be immediateWrites done in background – may not be immediate
ACLs on ACLs on printQueueprintQueue object separate from ACLs on object separate from ACLs on shared printer objectshared printer object Allows for creation of “layered” security modelAllows for creation of “layered” security model
Active DirectoryActive DirectoryPrinter publishing policy settingsPrinter publishing policy settings
Policies controlling printer publishingPolicies controlling printer publishing Allow printers to be publishedAllow printers to be published Automatically publish new printers in ADAutomatically publish new printers in AD
Policies affecting printer pruningPolicies affecting printer pruning Allow pruning of published printersAllow pruning of published printers Directory pruning intervalDirectory pruning interval Directory pruning retryDirectory pruning retry Many more – located in gpedit.mscMany more – located in gpedit.msc
Active DirectoryActive DirectoryAdvanced publishing optionsAdvanced publishing options
Standard AD publishing only supports Windows 2000 or later Standard AD publishing only supports Windows 2000 or later print servers in same domainprint servers in same domain
Pubprn.vbs Pubprn.vbs scriptscript Publish printers from Windows NT 4.0 print serversPublish printers from Windows NT 4.0 print servers Publish Windows 2000 and later printers to different domainsPublish Windows 2000 and later printers to different domains Located in system32 directoryLocated in system32 directory Publish all printers or specify single printersPublish all printers or specify single printers
CaveatsCaveats No synchronization or updatesNo synchronization or updates
Re-run the script to update printer informationRe-run the script to update printer information Pruning doesn’t occur by default Pruning doesn’t occur by default
Can be enabled through group policy Can be enabled through group policy Does not work across multiple forestsDoes not work across multiple forests Only copies subset of Only copies subset of printQueueprintQueue attributes attributes
Active Directory IntegrationActive Directory IntegrationSpecial considerations for Microsoft clusterSpecial considerations for Microsoft cluster
Relatively easy setup in most scenariosRelatively easy setup in most scenarios Nodes belong to same domainNodes belong to same domain Cluster User Account (CUA) resides in same domainCluster User Account (CUA) resides in same domain
Service account that performs printQueue operations on Service account that performs printQueue operations on behalf of the cluster nodesbehalf of the cluster nodes
If possible – spooler adds CUA to ACE If possible – spooler adds CUA to ACE automaticallyautomatically
CaveatCaveat If CUA does not have change access to printQueue If CUA does not have change access to printQueue
objects for all nodes, changes, and printer objects objects for all nodes, changes, and printer objects may be lost in failover scenariosmay be lost in failover scenarios
Active Directory IntegrationActive Directory IntegrationPrinter location trackingPrinter location tracking
Verify printers and subnetsVerify printers and subnets Define location tree structureDefine location tree structure Configure printer locationsConfigure printer locations
Manually through the printer propertiesManually through the printer properties Through a scriptThrough a script
Help users find printers in the Find Printers DialogHelp users find printers in the Find Printers Dialog Pre-populate location automatically by associating geographically-based Pre-populate location automatically by associating geographically-based
subnets with locationssubnets with locations Used at MicrosoftUsed at Microsoft
Enable Pre-populate printer search location policyEnable Pre-populate printer search location policy Assign locations manually to computers in an OU and push through Assign locations manually to computers in an OU and push through
Group PolicyGroup Policy Do nothing – let users type in location stringDo nothing – let users type in location string
For more information see Best Practices for Deploying For more information see Best Practices for Deploying Printer Location with Active Directory at Printer Location with Active Directory at http://www.microsoft.com/http://www.microsoft.com/printserverprintserver
Active DirectoryActive DirectoryCase study – Microsoft ITGCase study – Microsoft ITG
Define location tree structureDefine location tree structure Focus on end-user ease of useFocus on end-user ease of use
Don’t use complicated namesDon’t use complicated names Extensible schema for future objectsExtensible schema for future objects Follow subnet layoutFollow subnet layout
For geographical-based subnet hierarchiesFor geographical-based subnet hierarchies Chosen formatChosen format
One subnet per building wingOne subnet per building wing US / Sea / 27US / Sea / 27 US / Sea / 40 / 5054US / Sea / 40 / 5054
Stale information was the main problemStale information was the main problem SubnetsSubnets Printer locationPrinter location
Active Directory IntegrationActive Directory IntegrationScripting printer assignment by GPOScripting printer assignment by GPO
Use Active Directory and login scripts to Use Active Directory and login scripts to install printer connections automaticallyinstall printer connections automatically Create attribute for printer object linkCreate attribute for printer object link Assign link(s) to Organizational UnitsAssign link(s) to Organizational Units Run login script that performs ‘add printer’ for Run login script that performs ‘add printer’ for
linked printer objects based on OU membershiplinked printer objects based on OU membership
See See http://www.microsoft.com/http://www.microsoft.com/printserverprintserver for for more information…more information… Best Practices for Deploying Printer Location Best Practices for Deploying Printer Location
with Active Directory with Active Directory
Leveraging The Leveraging The Active DirectoryActive DirectoryScripting printer assignment Scripting printer assignment by GPOby GPO
Bertus GreeffBertus GreeffTest LeadTest LeadWindows Printing and ImagingWindows Printing and Imaging
Deploying And Configuring Deploying And Configuring Clustered Print Servers WithClustered Print Servers WithWindows Server 2003Windows Server 2003
Clustered Print ServersClustered Print ServersDecision factorsDecision factors
Value of clustered print serversValue of clustered print servers Overview of print server clusteringOverview of print server clustering RequirementsRequirements Administering clustered print serversAdministering clustered print servers Limitations of clustered print serversLimitations of clustered print servers
Clustered Print ServersClustered Print ServersValue propositionValue proposition
High availabilityHigh availability Common goal of achieving five 9’sCommon goal of achieving five 9’s Reduce risk of interruption during Reduce risk of interruption during
system failuresystem failure Minimize outages due to upgrades Minimize outages due to upgrades
and maintenanceand maintenance Automatic failure detection and recoveryAutomatic failure detection and recovery Minimal impact to clients during failuresMinimal impact to clients during failures Print jobs not lost during failoverPrint jobs not lost during failover
Clustered Print ServersClustered Print ServersValue propositionValue proposition
Lower TCOLower TCO Print server consolidation Print server consolidation
Multiple spooler resources permit consolidation of print Multiple spooler resources permit consolidation of print servers with less impact to client connectionsservers with less impact to client connections
Centralized administrationCentralized administration Single administrative interface for print spooler Single administrative interface for print spooler
management (cluadmin)management (cluadmin) Driver installation improved greatly in Driver installation improved greatly in
Windows Server 2003Windows Server 2003 Port monitors and language monitors already supportedPort monitors and language monitors already supported
Clustered Print ServersClustered Print ServersBasic conceptsBasic concepts
ClusterCluster – Group of connected systems that appear as a – Group of connected systems that appear as a single systemsingle system
Node Node – A single machine in the clustered environment– A single machine in the clustered environment ResourceResource – A logical service that may be hosted on any – A logical service that may be hosted on any
node in the clusternode in the cluster Resource Group – A group of resources that share Resource Group – A group of resources that share
dependencies and are managed and moved as a dependencies and are managed and moved as a logical unitlogical unit
FailoverFailover – The process of moving a resource or – The process of moving a resource or resource group from one node to anotherresource group from one node to another
Spooler resourceSpooler resource – A print spooler instance that hosts – A print spooler instance that hosts print queues which may be failed print queues which may be failed over from node to nodeover from node to node
Clustered Print ServersClustered Print ServersArchitectural conceptsArchitectural concepts
CLUSTER SERVERCLUSTER SERVER
GROUP-AGROUP-A
Disk ADisk A IP ResourceIP Resource NetNameNetName SpoolerSpooler
(NODE 1)(NODE 1)
GROUP-BGROUP-B
Disk BDisk B IP ResourceIP Resource NetNameNetName SpoolerSpooler
(NODE 2)(NODE 2)
GROUP-CGROUP-C
Disk CDisk C IP Resource1IP Resource1 IP Resource2IP Resource2 NetName1NetName1 NetName2NetName2 SpoolerSpooler
(NODE 2)(NODE 2)
NODE 1 NODE 2
AA BB CC
GROUP-CGROUP-C
Disk CDisk C 172.16.163.55172.16.163.55 172.16.163.12 172.16.163.12 CORP-PRN01CORP-PRN01 CORP-PRN02CORP-PRN02 SpoolerSpooler
(NODE 2)(NODE 2)
Clustered Print ServersClustered Print ServersRequirementsRequirements
Cluster size Cluster size Enterprise Server – up to 4(IA64); 8 (x86) nodes Enterprise Server – up to 4(IA64); 8 (x86) nodes Datacenter Server – up to 8 nodes Datacenter Server – up to 8 nodes
Storage configurations Storage configurations 2 node advanced server: SCSI, Fiber channel 2 node advanced server: SCSI, Fiber channel
arbitrated loop, switched fiber channel fabric arbitrated loop, switched fiber channel fabric No SCSI on Itanium No SCSI on Itanium (64-bit)(64-bit)
3 and 4 node Advanced Server: Switched fiber 3 and 4 node Advanced Server: Switched fiber channel fabric only channel fabric only
Datacenter Server: Switched fiber Datacenter Server: Switched fiber channel fabric only channel fabric only
Clustered Print ServersClustered Print ServersVirtual Server AdministrationVirtual Server Administration
Clustering introduces the concept of a virtual spoolerClustering introduces the concept of a virtual spooler Multiple virtual spoolers may exist on a single nodeMultiple virtual spoolers may exist on a single node Spooler resource dependant onSpooler resource dependant on
Storage class resourceStorage class resource Network name resource (virtual server)Network name resource (virtual server) Indirect dependency on IP address resource Indirect dependency on IP address resource
Dependant resources must exist before spooler Dependant resources must exist before spooler resource can be created resource can be created
Resource groups (related/dependent resources) are Resource groups (related/dependent resources) are failed over togetherfailed over together
Only one spooler resource per groupOnly one spooler resource per group
Clustered Print ServersClustered Print ServersCreating a spooler resourceCreating a spooler resource
No change from Windows 2000No change from Windows 2000 Recommend using Cluster Administrator Recommend using Cluster Administrator
“New Resource”“New Resource” Wizard to Wizard to Create a virtual server if one does not existCreate a virtual server if one does not exist Add dependencies on the virtual spooler and the Add dependencies on the virtual spooler and the
storage resourcestorage resource Specify spooling directory (default normally based Specify spooling directory (default normally based
on shared storage reference)on shared storage reference) Specify job completion timeoutSpecify job completion timeout
Clustered Print ServersClustered Print ServersCreating printersCreating printers
No change from Windows 2000No change from Windows 2000 Use the Add Printer WizardUse the Add Printer Wizard
Launch from the Printers folder of the virtual serverLaunch from the Printers folder of the virtual server
Create new standard TCP/IP portCreate new standard TCP/IP port Automatically propagated to member nodesAutomatically propagated to member nodes
Specify a print driverSpecify a print driver Automatically propagated to member nodesAutomatically propagated to member nodes
Specify a printer nameSpecify a printer name Specify a share nameSpecify a share name Provide location details and commentsProvide location details and comments
Clustered Print ServersClustered Print ServersAdding additional printer driversAdding additional printer drivers
Same installation process as Windows 2000Same installation process as Windows 2000 Automatically propagated to member Automatically propagated to member
nodes nodes New New
Open the Printers folder on the virtual serverOpen the Printers folder on the virtual server \\Cluster\Printers\\Cluster\Printers
Access the Access the SharingSharing tab on the desired printer tab on the desired printer Select Select Additional DriversAdditional Drivers, specifying the , specifying the
desired platformsdesired platforms Provide file location to driver filesProvide file location to driver files
Clustered Print ServersClustered Print ServersSupport limitationsSupport limitations
Supported port typesSupported port types Standard TCP/IP port monitor Standard TCP/IP port monitor (recommended)(recommended) LPR Port still supported for older devicesLPR Port still supported for older devices Some IHV monitors do not function correctlySome IHV monitors do not function correctly
Currently-spooling documents will be Currently-spooling documents will be re-spooled and printedre-spooled and printed
De-spooled documents will not be reprintedDe-spooled documents will not be reprinted
Additional ResourcesAdditional Resources
Print Server Web sitePrint Server Web site http://www.microsoft.com/http://www.microsoft.com/printserverprintserver
Whitepapers Whitepapers Upgrade, Migration, and InteroperabilityUpgrade, Migration, and Interoperability Print Clustering High Level OverviewPrint Clustering High Level Overview Creating Highly Available Print ServersCreating Highly Available Print Servers Active Directory and PrintingActive Directory and Printing Best Practices for Deploying Printer Location with Best Practices for Deploying Printer Location with
Active DirectoryActive Directory
Please visit the TechNet Web sitePlease visit the TechNet Web site http://www.microsoft.com/technethttp://www.microsoft.com/technet
© 2003 Microsoft Corporation. All rights reserved.© 2003 Microsoft Corporation. All rights reserved.This presentation is for informational purposes only. MICROSOFT MAKES NO This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.