Many of the workstations I administrate are located in remote location and end-users or site technicians from other organizations need to install local or network printers on the workstations.
Solution:
1. Install Administrative Templates (ADMX) for Windows Server 2008.
1. Apply this registry edit:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverInstall\Restrictions\AllowUserDeviceClasses]
"1"="{49ce6ac8-6f86-11d2-b1e5-0080c72e74a2}"
"2"="{4d36e979-e325-11ce-bfc1-08002be10318}"
"3"="{4658ee7e-f050-11d1-b6bd-00c04fa372a7}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint]
"Restricted"=dword:00000001
"TrustedServers"=dword:00000000
"ServerList"=""
"InForest"=dword:00000000
"NoWarningNoElevationOnInstall"=dword:00000001
"UpdatePromptSettings"=dword:00000002
References:
- Configure Computer Policy to Allow Non-Administrators to Install Specific Devices
- Control Printer Driver Installation Security
- System-Defined Device Setup Classes Available to Vendors
- Administrative Templates (ADMX) for Windows Server 2008
No comments:
Post a Comment