I've set up a test of group policy preferences to deploy printers to users by security group. I've set up each of the printers on a print server with permissions to use controlled by a corresponding security group, and I'm using item level targeting in the group policy to only deploy a printer to members of that printer's security group. I've also set them to Replace, and checked "Remove this item when it is no longer applied".
I tested by adding my test account to several printer groups; this worked fine. Then I removed some of them. All of the printers that I had before, including for the groups my test user was no longer a member of, were still mapped after multiple logins, and even leaving it overnight. This is the one thing left keeping us from having a working solution for printing, and I'd really appreciate any help anyone can...