Point and Print Restrictions policies are ignored in Windows Vista SP2, Windows Server 2008 SP2, and later Windows operating systems

Article translations Article translations
Article ID: 2307161 - View products that this article applies to.
Expand all | Collapse all

On This Page

Symptoms

Consider the following scenario:
  • You have a computer that is running Windows Vista Service Pack 2 (SP2), Windows Server 2008 SP2, or a later Windows operating system. 
  • You apply the Point and Print Restrictions policies.
  • A standard user tries to install a network printer.
In this scenario, the Point and Print Restrictions policies are ignored, and the user is prompted for administrative credentials.

Cause

Windows Vista SP2, Windows Server 2008 SP2, and later Windows operating systems ignore the Point and Print Restrictions policies when the policies are implemented in the user policy context.

The Point and Print Restrictions policies were previously implemented in the following location: 
User Configuration\Policies\Administrative Templates\Control Panel\Printers
Now, these policies are implemented in the following location:
Computer Configuration\Policies\Administrative Templates\Printers : Point and Print Restrictions
To have a consistent experience, we recommend that you set the policy in both locations if you are dealing with mixed-level clients.

Resolution

Note The following procedure assumes that you are using the version of the Group Policy Management Console (GPMC) that is included with Windows Server 2008 R2, Windows 7 RSAT, and later Windows operating systems. Otherwise, you must have updated ADMX files in your domain central store in order to see these options. To install the GPMC on Windows Server 2008 R2, Windows 7 RSAT, and later Windows operating systems, use the Add Features Wizard of Server Manager. 

How to change the Point and Print Restrictions policies setting

  1. Open the Group Policy Management Console (GPMC).
  2. In the GPMC console tree, navigate to the domain or organizational unit (OU) that stores the user accounts for which you want to modify printer driver security settings.
  3. Right-click the appropriate domain or OU, click Create a GPO in this domain, and Link it here, type a name for the new GPO, and then click OK.
  4. Right-click the GPO that you created, and then click Edit.
  5. In the Group Policy Management Editor window, click Computer Configuration, click Policies, click Administrative Templates, and then click Printers.
  6. Right-click Point and Print Restrictions, and then click Edit.

How to permit users to connect only to specific print servers that you trust

  1. In the Point and Print Restrictions dialog box, click Enabled.

    Computer Configuration\Policies\Administrative Templates\Printers : Point and Print Restrictions

    Setting: Enabled
  2. Click to select the Users can only point and print to these servers check box if it is not already selected.
  3. In the text box, type the fully qualified server names to which you want to allow users to connect. Separate each name by using a semicolon (;).
  4. In the When installing drivers for a new connection box, select Do not show warning or elevation prompt.
  5. In the When updating drivers for an existing connection box, select Show warning only.
  6. Click OK.

More information

Note Alternatively, you can disable the driver installation warning messages and elevation prompts by completely disabling the Point and Print Restrictions policies. This action disables the enhanced printer driver installation security.

Computer Configuration\Policies\Administrative Templates\Printers : Point and Print Restrictions

Setting: Disable

Properties

Article ID: 2307161 - Last Review: November 20, 2013 - Revision: 3.0
Applies to
  • Windows Server 2012 Standard
  • Windows Server 2012 Essentials
  • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Standard
  • Windows Server 2008 Service Pack 2
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Standard
  • Windows 7 Enterprise
  • Windows 7 Professional
  • Windows 7 Ultimate
  • Windows Vista Business
  • Windows Vista Enterprise
  • Windows Vista Ultimate
Keywords: 
KB2307161

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com