question

MojmirKavan-1420 avatar image
0 Votes"
MojmirKavan-1420 asked EddieRowe-1108 answered

Mapping network printer fails with "A policy is in effect on your computer which prevents you from connecting to this printer queue. Please contact your system administrator."

Seems like a bug in recent windows server update or something..

Adding network shared printer fails on Windows Server 2012 R2. Driver downloads and installs ok, but finishing the task fails with "A policy is in effect on your computer which prevents you from connecting to this printer queue. Please contact your system administrator.". Tried all possible GPO settings about point & print restrictions etc. Even under administrator account with UAC disabled. Affects multiple Windows Servers 2012-2016.

Only option to connect the printer is to manually add registry

[HKEY_CURRENT_USER\Printers\Connections\,,sharingcomputername,sharename]

"GuidPrinter"="{68499076-F37A-4089-BCE7-3B4C48416ADA}"

"Server"="\\\\sharingcomputername"

"Provider"="win32spl.dll"

"LocalConnection"=dword:00000001

Anyone has a better sollution?

windows-serverwindows-server-print
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

We have ONE printer on ONE print server behaving like this as well. Server 2012 R2 is the print server and not yet patched for September updates while our Win10 clients are patched to September. Before we deployed the client update I installed every printer on a test VM and then verified printing on each device after September patch -- no issues. Driver is a Type 3 packaged driver just like the others on the same server. What is curious is that I never receive a prompt for credentials on this printer...

We still have the Point and Print restrictions in place prior to the patch that requires admin rights since I thought might be helpful if a support person set the registry key to override the local admin rights requirement (set via GPP). I disabled this GPO for testing and there is no difference. The other dozen printers on the SAME server install just fine.

II am baffled...

0 Votes 0 ·

I tried your method of exporting the HKCU key where the printer is working and it does not resolve the issue for me. The test system already has the print driver installed for the same model printer/driver on another print server so I thought this should work in my test case.

0 Votes 0 ·
MojmirKavan-1420 avatar image
0 Votes"
MojmirKavan-1420 answered

Adding printers connections to registry is not a solution - even though printers got mapped, printing fails with "The system cannot find the file specified" message.
Setting RestrictDriverInstallationToAdministrators to 0 or playing with Point and Print Restrictions does not help.
The only option is to uninstall KB5005613 (Windows Server 2012 R2).

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered EddieRowe-1108 commented

Hello @MojmirKavan-1420,

This is due to recent updates to protect from the PrintNightmare exploit. Only users with Admin rights would be able to see the printer because the would have access to the drivers. One workaround is to install manually the printer drivers locally, and this will allow any users on the computer to map the device. Otherwise Microsoft released an article regarding the printer and printer driver management post patching:

https://support.microsoft.com/en-us/topic/kb5005652-manage-new-point-and-print-default-driver-installation-behavior-cve-2021-34481-873642bf-2634-49c5-a23b-6d8e9a302872

Hope it helps,



--If the reply is helpful, please Upvote and Accept as answer--

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

We already addressed the issue of the print installations being restricted to administrators using the registry edit for RestrictDriverInstallationToAdministrators.

This is a new issue. We discovered this morning that no users can add printers from our print server. Even users in the local computer administrators group get the same error about a policy being in effect on our computers that the original poster quoted.

1 Vote 1 ·

Exactly! I have tried all suggestions from the mentioned article like setting RestrictDriverInstallationToAdministrators to 0 or playing with Point and Print Restrictions. Some printers are just refusing to print and/or install ("A policy is in effect on your computer..."). This is true for EPSON printers for instance. Even though I got them installed with manually adding Printers\Connections to registry, printing attempts fails with "The system cannot find the file specified".

0 Votes 0 ·

My experience for an HP 4510 printer is the same. Deleting RestrictDriverInstallationToAdministrators or setting to 0 does nothing for the two misbehaving printers...found a second one.

0 Votes 0 ·
MojmirKavan-1420 avatar image
0 Votes"
MojmirKavan-1420 answered

Hi, I don't think that's the case because 1) I have tried with admin rights 2) driver is already installed.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

EddieRowe-1108 avatar image
0 Votes"
EddieRowe-1108 answered

In my testing I added a new printer that uses the same port as the existing one and this new printer does not suffer the same issue. So we're going to leave the existing one and append an "A" to the end of the new printer. So existing employees who are printing without any issue can do so, while those who cannot will install the "A" printer. At this point we are up to two different printers having this issue...different models, all <cough> HP, different drivers, different print servers, etc.

Another work around could be to install this ONE printer as a local TCP/IP printer.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.