4.9 Using iPrint Client Management

iPrint Client Management (iCM) includes functionality similar to the Remote Printer Management feature included in Novell Distributed Print Service, which lets you designate printers to be installed on a workstation when a user logs in to the workstation using the Novell Client. Previously, this functionality was only available with NDPS printers, but now it is available for iPrint printers. iCM also lets you control the iPrint Client configuration, making it easier to configure the iPrint Client without visiting each workstation. When the user logs in to the workstation using the Novell Client, the iPrint Client settings you designate are configured on the user’s workstation.

iCM is available for Windows 2000/XP/2003/2008/Vista/7/8/8.1/2012/2012 R2 workstations, and requires the following:

IMPORTANT:Novell iPrint Windows Client components of version 5.72 and later do not require the Novell Client. However, Novell iPrint Windows Client components of versions prior to 5.72 need Novell Client 4.91 for Windows 2000/XP/2003 or later. For more information, see Section 4.9.3, Configuring iCM for Windows / Active Directory (AD) environments without Novell Client.

All of the required components are included in NetWare 6.5 Support Pack 8 except the Novell Client 4.91 for Windows 2000/XP, which is available from the Novell Support Web site.

The iPrint iManager plug-ins also work with Mobile iManager. Mobile iManager is available at Novell Downloads.

NOTE:You can install the iPrint iManager plug-in for NetWare NPM on Mobile iManager or iManager running on NetWare. You can install the iPrint iManager plug-in for Linux on Mobile iManager or iManager running on Linux or NetWare. Depending on your iManager configuration, you might see two iPrint roles. The iPrint role is for iPrint running NetWare tasks, and, the iPrint (Linux) role is for iPrint running Linux tasks.

With iCM, you manage a set of attributes on a given eDirectory tree regardless of whether the printers are hosted on an Open Enterprise Server NetWare or a Linux server, because iCM is configured and managed through eDirectory objects.

Use the following information to install and configure iCM:

4.9.1 Understanding the Schema Update

iPrint Client Management requires you to extend the eDirectory schema. The iprint.sch file (found in - /opt/novell/sch/iprint.sch) contains the schema extension, which adds some optional attributes to Organization, Organizational Unit, Groups, and User object class definitions. The attributes are:

  • iPrintiCMPrinterList

  • iPrintiCMClientTrayURI

  • iPrintiCMClientProxyURI

  • iPrintiCMClientFlags

Users should be able to read these new attributes on their user objects; however, if you plan to configure iCM at an Organization, Organizational Unit, or Group object level, users might need the Read right to read the attributes. The first time you access iCM on an Organization, Organizational Unit, or Group object in iManager, iManager attempts to assign the Read right to the attributes. Then users should be able to read these attributes through inheritance on subcontainers and groups. If iManager cannot assign the read right to the Organization, Organizational Unit, or Group object, your configuration is saved, but a message appears explaining that rights to the attributes could not be granted. You need to grant rights to these iPrint attributes by using either the eDirectory Administration or Trustee task in iManager.

HINT:To avoid multiple explicit rights assignments for the iCM attributes, you should make your first iCM assignment as high in the eDirectory tree as possible so that the rights can flow down the tree. You could even make an iCM assignment so that the Read right is set, and then disable the iCM assignment because this does not remove the Read right to the attributes.

4.9.2 Deploying iPrint Client Management

  1. Distribute the iPrint Client version 4.26 or later.

    For more information, see Windows: Distributing the iPrint Client. IIf the iPrint Client is has already been distributed, see Section 4.5.1, Updating the iPrint Client.

    If you use iprint.ini to distribute the iPrint Client, you need to allow enough time for users to update to the new client before configuring iCM. If you do not allow enough time, the client attempts to update a workstation at the same time it is trying to deploy the settings in iCM.

  2. Configure iPrint Client Management in iManager.

    See Section 4.9.4, Managing iPrint Client Settings or Section 4.9.5, Automatically Installing Printers for more information.

4.9.3 Configuring iCM for Windows / Active Directory (AD) environments without Novell Client

The Novell iPrint Windows Client (version 5.72 and later) now supports Windows / Active Directory environments without the Novell Client. This new feature provides shared authentication with the Windows Login, and also supports iCM for printer distribution and client settings. The following pre-requisites should be met:

  • Synchronization of users, groups, and containers (via Novell Identity Manager or a similar synchronization tool)

  • Standardization on LDAP user names that require unique user names and require the uniqueID attribute to be set

4.9.4 Managing iPrint Client Settings

You can standardize the iPrint Client settings for users by using iCM Client Configuration to define the attributes for an Organization, Organizational Unit, Group, or a User Object. The attributes are delivered as a complete set, meaning that if you change only one attribute, all of the attributes are delivered to the client. The changes are not additive, so you cannot change the value of an attribute for an object and change the value of a different attribute on another object. Only the set of attributes closest to the user’s object are used.

When a user logs in, iCM walks up the tree from the user’s container to the highest container in the user’s fully distinguished name. Then iCM starts applying the iCM attributes in each container as it walks back down to the user object. Then the user's group membership list is queried for the same attributes. Those closest to the User object have a higher priority. The set of attributes on or closest to the User object is always used.

WARNING:Using iCM on group objects can simplify making assignments, but using iCM on multiple groups can cause undesired results. You should create a new Group object with a descriptive name so that you can control the desired results for users that you assign to that group.

To configure the iCM client attributes:

  1. In iManager, click iPrint > iPrint Client Management.

  2. Browse to and select the Organization, Organizational Unit, Group, or User object you want to automatically configure iPrint Client Settings for.

  3. Click Client Configuration.

  4. Configure the attributes you want for the iPrint Client on the workstation.

    Click Help for explanations about the attributes.

  5. Click OK to save the changes.

A log file of the iCM actions taken and ignored is stored in c:\ndps\users\username\icmlog.txt, where username is the name used to log in to Windows by using the Novell Client Login. The file is created and updated when the user uses the Novell Client to log in to the workstation.

4.9.5 Automatically Installing Printers

iPrint Client Management Printer Configuration lets you designate printers to be downloaded and installed automatically on user workstations when users log in to the network. These printers appear in the user’s printers folder, ready for use. You can also use this feature to remove printers, assign a printer to be the default printer, and set a printer to be a temporary printer so that it is removed when the workstation is rebooted.

iCM configures printers on workstations based on assignments made on the User object, Group object, Organization, and Organizational Unit container. When you use iManager to designate a printer for automatic installation on a user's workstation, the associated eDirectory Container, Group, or User object is updated with this information.

The actions taken are cumulative, meaning that action is taken for each assignment you made. For example, if you add two printers at one level, then add three more printers at another level, the workstation has all five printers installed. If you have more than one printer set as the default, the last printer installed is set as the default.

When a user logs in, iCM starts searching at the highest container in the user’s full distinguished name, looking for the iCM Printer Configuration associated to containers and groups. The search continues through subcontainers down to the User object. Printers continue to be added or removed to the workstation as specified by iCM. If the Allow Only Specified Printers to Reside on Workstation option is enabled, any actions to printers specified above that container or group in the user’s fully distinguished name are ignored, but any actions to printers specified between that point and the User object are taken.

  • If the client finds a printer designated for installation that has not yet been installed, it is automatically installed.

  • If a currently installed printer is added to the Printers to Remove list, that printer is automatically uninstalled.

  • If you designate a different printer to be the default, the change is made.

  • Using Do Not Update Workstations turns off iCM for printers at that container, group or user, but actions for iCM printers found on other containers or groups are taken.

WARNING:Using iCM on group objects can simplify making assignments, but using iCM on multiple groups can cause undesired results. You should create a new Group object with a descriptive name so that you can control the desired results for users that you assign to that group.

To automatically install printers:

  1. In iManager, click iPrint > iPrint Client Management.

  2. Browse to and select the Organization, Organizational Unit, Group or User object you want to automatically install printers for.

  3. Configure the attributes you want for the Printer Configuration option.

    Do Not Update Workstations: iCM for printers is disabled and printers are not installed or removed from workstations. Printers already installed are not altered.

    Allow Only Specified Printers to Reside on Workstations: Allow only the iPrint printers specified in the Printers to Install list to reside on the workstation. All other iPrint printers on the workstation are removed. Non-iPrint printers are not affected.

  4. Use the buttons to modify the Printers to Install list.

    If you select a printer to be the default and want to remove the Set as Default attribute, click the button next to to the Default Printer field.

  5. Modify the Printers to Remove list.

  6. Click OK to save the changes.

A log file of the iCM actions taken and ignored is stored in c:\ndps\users\username\icmlog.txt, where username is the name used to log in to Windows using the Novell Client Login. The file is created and updated when the user uses the Novell Client to log in to the workstation.

4.9.6 Using Advanced Settings

The iPrint Client Management Advanced Settings page lets you configure how far up the eDirectory tree iCM should look for iCM client settings and printers. You can also configure whether the iCM results dialog box should display on the workstations, which is useful for troubleshooting the iCM results.

  1. In iManager, click iPrint > iPrint Client Management.

  2. Browse to and select the Organization, Organizational Unit, Group or User object you want to configure the settings on.

  3. Click Advanced Settings.

  4. Configure these settings as needed:

    Ignore iPrint Client Management (iCM) settings on parent containers: Limits the scope used to find iCM client settings and assigned printers to the object where the assignment is made and below. You can enable this setting on User, Group, and Container objects. You should enable this setting to limit traffic on the network, especially across slow network links.

    When a user logs in, iCM checks the User object and group memberships, then it walks up the eDirectory tree from the user object to the root-most container to determine where iCM assignments have been made. If iCM encounters the Ignore Settings on Parent Containers attribute, iCM stops walking up the tree on that object. Then, iCM implements the iCM client settings and printers on the workstation.

    To determine the iCM printers for the workstation, iCM searches down to the User object, adding and removing iCM printers as specified on each Container, Group, or User object. For iCM client settings, iCM uses the set of iCM client attributes closest to or on the User object.

    The attributes are delivered as a complete set, meaning that if you change only one attribute, all of the attributes are set on the client. The changes are not additive, so you cannot change the value of one attribute for an object and change the value of a different attribute on another object. Only the set of attributes closest to or on the user’s object are used.

    The following table describes the behaviors when enabling this setting on different objects.

    Object

    Behavior

    User

    Only the iCM client settings and printers assigned to the User object are used. iCM does not check any group memberships, the User object's container, or parent containers.

    Group

    iCM checks assignments on the User object and all associated groups, but does not check the User object's container or parent containers. All group memberships are read and assignments are considered even if this setting is enabled on just one group. This is useful if you want to apply iCM client settings or assigned printers from a group membership, but do not want any iCM client settings or assigned printers from the User object's container.

    IMPORTANT:Using iCM on Group objects can simplify making assignments, but using iCM on multiple groups could cause undesired results. You should create a new Group object with a descriptive name so that you can control the desired results for users that you assign to that group.

    Organization or Organizational Unit

    iCM checks assignments on the user object, all associated groups, and each container up to a parent container where this setting is enabled.

    Display iCM results in a dialog box on workstations: Displays a window on the workstation that shows the printers that were installed and removed.

  5. Click OK to save the changes.