[Samba] Windows 10 point and print restriction

[L.P.H. van Belle]

Hi Sven, 

Ok, all the things you need to know to fix it. 

If you are deploying a printer using User Group Policy Preferences,
the linked OU should contain users that need to have the printer installed. 

If you are deploying a printer using Computer Group Policy Preferences,
the linked OU should instead contain computers that need to have the printer installed. 

Linking a User GPP to an OU that only contains computers, or vice versa, will have no effect. 

When deploying a printer to an OS that is a different architecture than the print server (such as 32-bit Windows 10 connecting to a 64-bit print server), make sure the correct drivers are installed on the print server. Both the 32-bit and 64-bit drivers must have the exact same name for them to associate properly. Deploying a printer will fail if the appropriate driver for the printer can't be found.

>>>>>>!! this needs to be on user AND computer policies.  !! <<<< 
Why, due to KB3170455. 

Uncheck/check "Users can only point and print to these servers" and 
Uncheck/check "Users can only point and print to machines in their forest"

Define the servers which deploy you printer drivers.
>>>>>  and do use the servers there in FQDN.   <<<<<<< 

Disable search for printer drivers through windows update. 

Problems with setting/keeping the default printer..  
And as of Windows 10 1511,  Turn off "Let windows manage my default printer" 
With Regkey: 
HKEY_Current_User\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\LegacyDefaultPrinterMode 
Dword: 0x00000001 

And if you connecting to \\server\printer 
Change it to  \\server.internal.domain.tld\print-share


And did i report : KB3170455 already ? 
This is the problem maker, KB3170455 stops non-admin users from 
installing a network-printer .. 
all info here about the patch: 
http://blog.vectranetworks.com/blog/microsoft-windows-printer-wateringhole-attack 

If above does not work/helps to a solution then im out of options. 
Keep an eye on the printer driver suppliers, they must modify there drivers also, so its 2 problems in one. 
So if you cant fix it with all info above, remove KB3170455 and wait untill the printer driver supplieer and MS releases new bugs ;-) 


Greetz, 

Louis




> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Vogel, Sven via
> samba
> Verzonden: woensdag 17 augustus 2016 11:01
> Aan: 'samba at lists.samba.org'
> Onderwerp: Re: [Samba] Windows 10 point and print restriction
> 
> Hi Louis,
> 
> no all driver work (brother, kyocera, hp)
> 
> I installed the driver but I get the same message with trust. It seems not
> work without remove the security patches. When I remove security patches
> it seems not important which driver are installed.
> In theory it should work with the driver but it seems not.
> 
> Greetz,
> 
> Sven
> 
> -----Ursprüngliche Nachricht-----
> Von: samba [mailto:samba-bounces at lists.samba.org] Im Auftrag von L.P.H.
> van Belle via samba
> Gesendet: Mittwoch, 17. August 2016 08:37
> An: samba at lists.samba.org
> Betreff: Re: [Samba] Windows 10 point and print restriction
> 
> Hai Sven,
> 
> Thanks  you for reporting back.
> Now, anything left thats not working? I saw the message about the driver.
> 
> >thanks fort he driver.
> >
> >It works not by me. I removed the kb ? i send it to mailing list. I don?t
> >know. I have other driver but it don?t resolve the problem.
> >
> >Do you need more info?
> 
> What is the problem here? I lost what this problem is/was...
> 
> Greetz,
> 
> Louis
> 
> 
> 
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Vogel, Sven
> > via samba
> > Verzonden: dinsdag 16 augustus 2016 16:28
> > Aan: 'samba at lists.samba.org'
> > Onderwerp: Re: [Samba] Windows 10 point and print restriction
> >
> > Hi Louis,
> >
> > I solved the problem when I remove the KB3176493 and KB3172729. I
> > don?t know normally KB3172729 has nothing to do with these point and
> > print problem but after remove both of them it works.
> >
> > I use a Windows 10 N 1511 Build 10586.545.
> >
> > I hope that help other people here.
> >
> > Greetz
> >
> > Sven
> >
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba