This is for deploying printers. I got a computer named FRONTDESK with a printer attached to it and a rotating staff who handles that system. I think maybe it's because I have computers in a different OU than users and thus the users don't get the GPO? But it should be per-computer so that shouldn't matter, right? Here's the meat of what I have:
| +FRONT (OU)
| +FRONTDESK (computer)
| +GPO for FRONTDESK linked to WORKSTATIONS (I've tried linking the computer and security group)
+DEPARTMENTS (OU) (all the users and regular printer GPOs are linked in here)
+Security Group for FRONTDESK (of which only the computer FRONTDESK is a member)
I actually redid our GPO setup recently due to someone in one department wanting to float to another and I had most printer GPOs linked to sub-OUs within DEPARTMENTS. I ended up using Security Filtering to set up proper departmental SGs (which we already had and were using anyway) and individuals when needed.
For a per-computer setup, I don't know if it's appropriate to deploy a printer via COMPUTER CONFIGURATION or USER CONFIGURATION. I think COMPUTER but I've put it as a CREATE printer (Preferences, Control Panel Settings, Printers...) under both out of desperation. In theory the COMPUTER settings override USER ones, right? I've been "gpupdate /force"ing like crazy with no results.
I've looked at various "here's how you do it" things via the web and either I'm not getting it or I'm doing something wrong.