0

Old printers that have always deployed via Print Management > Deploy via GPO are now not deploying for new profiles.

the only Changes have been to my Settings GPO with regard to PrintNightmare and disallowing point and print... Under Computer>Policies>AdminTemps>Printers>Point and Print Restrictions>

Users can only point and print to these servers> disabled Users can only point and print to machines in their forest > disabled When installing drivers for a new connection > show warning and prompt When updating drivers for an existing connection > show warning and prompt

But New printers do not appear. If I try to deploy the printer via User preferences (instead of the Print management > deploy via GPO) it complains about the driver not being available on the client PC.

Improve this question
4
  • That may be related to the change in default behavior in Point and Print. See: msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34481 support.microsoft.com/en-us/topic/…
    – Greg Askew
    Aug 14, 2021 at 15:23
  • Okay, confirming now. How do i allow users to only install drivers from the official print server in the org? Do i have to change the default policy back?
    – kellyredbook
    Aug 14, 2021 at 16:47
  • If you wanted to back out, add the registry value HKLM\Software\Policies\Microsoft\Windows NT\Printers!PointAndPrintRestrictDriverInstallationToAdministrators to 0 in a GPO. But you also should configured allowed Point and Print servers. Otherwise anyone can escalate to system in a trivial way.
    – Greg Askew
    Aug 14, 2021 at 18:01
  • go make than an answer and i'll mark it. This helped me down the right path to solve the problem.
    – kellyredbook
    Aug 14, 2021 at 23:10

1 Answer 1

Reset to default
2

If you wanted to back out, add the registry value HKLM\Software\Policies\Microsoft\Windows NT\Printers!PointAndPrintRestrictDriverInstallationToAdministrators to 0 in a GPO. But you also should configured allowed Point and Print servers. Otherwise anyone can escalate to system in a trivial way

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.