Step 3: Print Management Check. Step 4: Backup and navigate the Registry. Backup the registry first! Step 6: Login and check. Read these next Windows updates released August 10, and later will, by default, require administrative privilege to install drivers. We made this change in default behavior to address the risk in all Windows devices, including devices that do not use Point and Print or print functionality.
By default, non-administrator users will no longer be able to do the following using Point and Print without an elevation of privilege to administrator:. Note If you are not using Point and Print , you should not be affected by this change and will be protected by default after installing updates released August 10, or later. Important Printing clients in your environment must have an update released January 12, or later before installing updates release September 14, You can modify this default behavior using the registry key in the table below.
However, be very careful when using a value of zero 0 because doing that makes devices vulnerable. If you must use the registry value of 0 in your environment, we recommend using it temporarily while you adjust your environment to allow Windows devices to use the value of one 1. Default behavior: Setting this value to 1 or if the key is not defined or not present , will require administrator privilege to install any printer driver when using Point and Print.
This registry key will override all Point and Print Restrictions Group Policy settings and ensures that only administrators can install printer drivers from a print server using Point and Print. Setting the value to 0 allows non-administrators to install signed and unsigned drivers to a print server but does not override the Point and Print Group Policy settings.
Consequently, the Point and Print Restrictions Group Policy settings can override this registry key setting to prevent non-administrators from installing signed and unsigned print drivers from a print server. Some administrators might set the value to 0 to allow non-admins to install and update drivers after adding additional restrictions, including adding a policy setting that constrains where drivers can be installed from.
Important There is no combination of mitigations that is equivalent to setting RestrictDriverInstallationToAdministrators to 1. Note Updates released July 6, or later have a default of 0 disabled until the installation of updates released August 10, or later.
Updates released August 10, or later have a default of 1 enabled. Note Windows updates will not set or change the registry key. You can set the registry key before or after installing updates released August 10, or later. To automate the addition of the RestrictDriverInstallationToAdministrators registry value, follow these steps:. After installing updates released October 12, or later, you can also set RestrictDriverInstallationToAdministrators using a Group Policy, using the following instructions:.
Please contact your system administrator. If you use the Add Printer Wizard to try to install the printer on a Windows Server based client, you receive the following error message when you click Finish to complete the printer installation:. Unable to Install Printer. The printer driver is not compatible with a policy enabled on your computer that blocks Windows NT 4.
If you want to use this driver, contact your system administrator about disabling this policy. This issue occurs if the printer driver that is installed on the print server is a third-party printer driver. You can't install a shared network printer that has a third-party printer driver locally on a Windows XP SP1-based computer if you're a regular user or a member of the Power Users group.
In Windows Server , you can't install a shared network printer locally if the printer driver that is installed on the print server uses third-party kernel-mode printer drivers. A policy setting in Windows Server prevents users from installing printers that use third-party kernel-mode print drivers. Find the policy Devices: Prevent users from installing printer drivers. Set the policy value to Disable.
Then you can set the policy value to Disable, any unprivileged user can install a printer driver as a part of a shared printer connection to a computer. However, this policy does not allow downloading and installing an untrusted not-signed printer driver.
The next step is to allow the user to install the printer drivers via GPO. Enable the policy and specify the device classes that users should be allowed to install. Click the Show button and in the appeared window add two lines with device class GUID corresponding to printers:. When you enable this policy, members of the local Users group can install a new device driver for any device that matches the specified device classes.
In Windows 10 there is another feature related to the UAC User Account Control settings, which occurs when you try to install a shared network printer. If the UAC is enabled, a message appears in which you want to specify the credentials of the Administrator. To solve this problem, you need to disable the policy Point and Print Restrictions.
In order to enable compatibility with previous versions of the Windows operating system, it is recommended to disable both policies. The more you tell us the more we can help. Can you help us improve?
Resolved my issue. Clear instructions. Easy to follow. No jargon. Pictures helped. Didn't match my screen. Incorrect instructions.
0コメント