question

MichaelLeppelman-5179 avatar image
0 Votes"
MichaelLeppelman-5179 asked TheAlanMorris edited

Domain users unable to install print drivers

I am having a problem with Domain users installing print driver. I have a GPO setup as show in this link Allow Non-administrators to Install Printer Drivers via GPO – TheITBros I have had this set up for years and just recently it stopped working. I have a new user that I can't even set up a network printer for because the system will not allow him to install the driver. I logged in as domain administrator and installed the printer. It didn't show up on his profile as expected so I tried to install it, now that the driver was on the computer, but is still wouldn't allow him to install it.

windows-server-print
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

TheAlanMorris avatar image
1 Vote"
TheAlanMorris answered TheAlanMorris edited

@MichaelLeppelman-5179


The new Windows default requires administrative access to install software downloaded from the print server when using the Windows Point and Print feature, you know this software as the print driver.

Microsoft does permit a new registry setting to allow a standard user to install the software.

A GPO which has worked for years will no longer work based on the new default in Windows.

If you would like to allow standard users the ability to download and install the software from the print server please review the Microsoft article to accomplish this. https://support.microsoft.com/en-gb/topic/kb5005652-manage-new-point-and-print-default-driver-installation-behavior-cve-2021-34481-873642bf-2634-49c5-a23b-6d8e9a302872


Please read the article. The registry setting is a DWord RestrictDriverInstallationToAdministrators in HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint

When the key does not exist or the value for a manually added key is 1, this prevents the software installation by a standard user.

If you have preinstalled the driver on the client and ALL the files exactly match the file set which is installed on the server, then the driver will be copied from the server and the spooler will compare the files and should throw away the software downloaded from the server.

There is a log file to determine why this may fail. C:\Windows\INF\setupapi.dev.log.

Look for !!! in the log and this should identify which file(s) is causing the mismatch.

Adding a printer is per user. A connection to a shared printer added for user1 will NEVER be seen by user2. User2 will need to add the connection in their security context.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

oddlenIT-6285 avatar image
0 Votes"
oddlenIT-6285 answered MichaelLeppelman-5179 commented

Hi, I have the same problem. Did you manage to solve it?
Thank you

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I haven't figured this out yet.

0 Votes 0 ·