Why is the printer not deployed using windows group policy?

Question

Active Directory

I did everything like here: gpo-planet.com/?p=2759
Domain controller 2008 r2, network printer kyocera 3040 mfp, machine in the win7x32 domain
But when I log in under the user there is no printer, I did not find any errors in the events.
When executing the powershell command:

([wmiclass]'Win32_Printer').AddPrinterConnection("\\zamad\prodagi")

where zamad - domain controller, part-time print server on which I installed all printers, prodagi - installed printer, returns 0x5 i.e. AccessDenied, why?
after I added the rights to the "Domain Users" group: "print", "printer management" and "print management", the printer was added by the above script, although the "All" group already had default rights to "print" (and therefore to connect? ). Why doesn't he want to deploy with the "Deploy using Group Policy" button?

Answer 1

well, they don’t raise additional services to the DS, there is a special security policy