point and print restrictions

KB ID 0000492

Problem

I’ve touched on this briefly in KB0000389, I suggest you read through that first so you understand what the requirements are to deploy a GPP instead of the GPO’s you are probably used to.

Solution

1. First thing to do is install the printer that needs deploying on a print server. Make sure if your clients are NOT x64 bit that you also add the x86 drivers for your clients to use.

How to tell if a machine is x86 (32 bit) or x64 (64 bit).

2. The following is a “Gotcha” (especially on HP printers), on the Printer Properties page, General tab > Select “Print Processor” > Ensure it’s set to winprint and RAW.

3. On a domain controller, Start > administrative tools > Group Policy Editor > Either edit an existing policy or create a new one (Remember its a computer policy you need to link it to something with computers in it, if you link it to a users OU nothing will happen).

4. Give the policy a sensible name.

5. Edit the policy you have just created.

6. Navigate to > Computer Configuration > Preferences > Control Panel Settings > Printers > In the right hand window, right click > New > TCP/IP Printer.

7. Select Create > I prefer to use the IP address of the printer but you can use the DNS name if you wish > The Local Name is what the client will see > Enter the Path to the printer (In UNC format) > You can also enter a location and comment if you wish > Apply > OK.

8. All being well you should see the printer listed.

9. Now for another “Gotcha” in the same policy navigate to > Computer Configuration > Policies > Administrative Templates > Printers > Locate the “Point and Print Restrictions” policy.

10. Change the settings for this policy so that it is disabled.

12. Close the Policy editor, then either reboot the clients, wait a couple of hours, or manually run “gpupdate /force” on them.

Problem

While setting up a new printer you might see this message on the screen, if you are manually installing a printer that’s fine, but if you are scripting the printer installs you DONT want all your users to see this popping up on their screens, it makes them flap, and then they will ring you up.

Printers
Do you trust this printer?
Windows needs to download and install software from the {print server name} computer to print to {printer name}. Proceed only if you trust the {print server name} computer on the network.

So using group policy let’s tun this off.

Solution

1. Go to your domain controller. Start > Administrative tools > Group Policy management console > either create a new policy and link it to your domain (or required OU’s) or edit an existing policy.

2. Edit the policy and navigate to:

[box]Computer Configuration > Policies > Administrative Templates > Printers[/box]

3. Locate the “Point and Print Restrictions” policy and set it to enabled with the following settings:

When installing drivers for a new connection = Do not show warning or elevation prompt

When updating drivers from an existing connection = Do not show warning or elevation prompt

4. This is also set in user policy so now navigate to:

[box]User Configuration > Policies > Administrative Templates > Control Panel > Printers[/box]

5. Locate the “Point and Print Restrictions” policy and set it to enabled with the following settings:

When installing drivers for a new connection = Do not show warning or elevation prompt

When updating drivers from an existing connection = Do not show warning or elevation prompt

6. Apply the policies then close the policy editor. Then get the clients to reboot, wait a couple of hours, or manually run “gpupdate /force” on them.

PeteNetLive

Technology that 'Just Works'

Tag Archives: point and print restrictions

Problem

Solution

Related Articles, References, Credits, or External Links

Problem

Solution

Related Articles, References, Credits, or External Links