I have a login policy configured for each printer/share that my users need (or have notified me that they need), scoped to all managed workstations. They're then limited by AD group (we don't use OD) in the same way that the GPO is applied to certain groups, to emulate that behavior.

@dstranathan, this is what we do: https://macmule.com/2011/09/08/how-to-map-drives-printers-based-on-ad-group-membership-on-osx/

Our system was a bit of a hack, but it worked. i had to do it quickly and had not learned casper very well before i needed it.

i ended up making an applescript app that ran every shell script in the directory /.login/
First it uninstalled any printers prnRm.sh, then installed required printers (biased off a weird logic patter i needed) prnAdd.sh Then mapped the required drives biased on if they are a student or not (users AD group membership)

I needed to do it this way, because i needed the users kerberos authentication to run the commands, so i could not just deploy them though casper.

I've only been with the Casper Suite for about a year now (maybe 1.5?), and I'm using both Profiles and scripts to get the job done. Network drives are being handled via Profiles. This is still a work in progress, but each department has a shared network drive, and everyone has a private network drive. There's one profile, applied to all Staff/Faculty machines, that mounts the personal drive. The department drives are where it gets...fun. Some departments only want their drive mapped on machines within their department, so the profile is limited to machines in their department and the drive mapping itself is limited to folks who are members of that drive's AD group. Other departments want their staff to be able to mount the drive on any machine on campus, so there's a separate profile for that. We're still working out some of the kinks, but it's been really helpful so far.

Printers...well, ech. They're printers, so they're going to be finicky. Our labs, which utilize drive protection software, have a login script that runs to map the lab's printer. Depending on the department, we have Self Service items for the department copiers/multi-function devices or run once policies against the Staff/Faculty machines. Both the Self Service and policies are scoped to specific machines (smart/static groups) and specific AD groups. I use scripts over Profiles & Casper's built-in function as it just 'seems' to be more reliable on the more complex printers, which then necessitates that all my printers be scripted; for consistency.

If you have any specific questions about my setup or anything else, feel free to ask.

Thanks guys.

@bentoms I am playing with your example AppleScript & launchd LaunchAgent and I like the basic framework a lot - this has potential for my environment as it basically does exactly what I need. I already have a rough prototype running on a couple Macs here in IT. But I see a couple gotchas/caveats that Im trying to workaround.

Mind if I ask you a few questions about your script? Can I contact you?

Printers: We moved the entire organisation to a single vendor and almost all printers are follow you type printers. This means there are only a couple of universal queues deployed.
We do have some stand alones deployed directly out of Casper based on machine location and a self service solution for adhoc additions.

Shares: Because our AD has a couple of none standard settings I custom scripted a solution for this that reads a config file from a read only share, this lists available shares and what AD group membership to check before attempting to mount these shares, it also checks periodically and attempts to repair any missing shares so that laptop users that go wandering eventually get their shares back given a few minutes back at their desk. It could do with some more tweaking but it works.

Casper in general: Given a reasonable level of scripting ability you can make it do pretty much anything! sounds like an over exageration, but it's really not, if you could do it sitting in front of the machine you can probably make Casper do it in a managed fashion one way or another.