[Samba] Windows 10 point and print restriction

[L.P.H. van Belle]

Small addition, if you see in the Windows eventlogs something like: 

Source	: Group Policy Printers
event id 	: 4098 
and in the message '0x80070bcb' 
then you hit the problems cause due KB3170455. 

Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens L.P.H. van Belle
> via samba
> Verzonden: woensdag 17 augustus 2016 11:42
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Windows 10 point and print restriction
> 
> Hi Sven,
> 
> Ok, all the things you need to know to fix it.
> 
> If you are deploying a printer using User Group Policy Preferences,
> the linked OU should contain users that need to have the printer
> installed.
> 
> If you are deploying a printer using Computer Group Policy Preferences,
> the linked OU should instead contain computers that need to have the
> printer installed.
> 
> Linking a User GPP to an OU that only contains computers, or vice versa,
> will have no effect.
> 
> When deploying a printer to an OS that is a different architecture than
> the print server (such as 32-bit Windows 10 connecting to a 64-bit print
> server), make sure the correct drivers are installed on the print server.
> Both the 32-bit and 64-bit drivers must have the exact same name for them
> to associate properly. Deploying a printer will fail if the appropriate
> driver for the printer can't be found.
> 
> >>>>>>!! this needs to be on user AND computer policies.  !! <<<<
> Why, due to KB3170455.
> 
> Uncheck/check "Users can only point and print to these servers" and
> Uncheck/check "Users can only point and print to machines in their forest"
> 
> Define the servers which deploy you printer drivers.
> >>>>>  and do use the servers there in FQDN.   <<<<<<<
> 
> Disable search for printer drivers through windows update.
> 
> Problems with setting/keeping the default printer..
> And as of Windows 10 1511,  Turn off "Let windows manage my default
> printer"
> With Regkey:
> HKEY_Current_User\SOFTWARE\Microsoft\Windows
> NT\CurrentVersion\Windows\LegacyDefaultPrinterMode
> Dword: 0x00000001
> 
> And if you connecting to \\server\printer
> Change it to  \\server.internal.domain.tld\print-share
> 
> 
> And did i report : KB3170455 already ?
> This is the problem maker, KB3170455 stops non-admin users from
> installing a network-printer ..
> all info here about the patch:
> http://blog.vectranetworks.com/blog/microsoft-windows-printer-
> wateringhole-attack
> 
> If above does not work/helps to a solution then im out of options.
> Keep an eye on the printer driver suppliers, they must modify there
> drivers also, so its 2 problems in one.
> So if you cant fix it with all info above, remove KB3170455 and wait
> untill the printer driver supplieer and MS releases new bugs ;-)
> 
> 
> Greetz,
> 
> Louis
> 
> 
> 
> 
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Vogel, Sven via
> > samba
> > Verzonden: woensdag 17 augustus 2016 11:01
> > Aan: 'samba at lists.samba.org'
> > Onderwerp: Re: [Samba] Windows 10 point and print restriction
> >
> > Hi Louis,
> >
> > no all driver work (brother, kyocera, hp)
> >
> > I installed the driver but I get the same message with trust. It seems
> not
> > work without remove the security patches. When I remove security patches
> > it seems not important which driver are installed.
> > In theory it should work with the driver but it seems not.
> >
> > Greetz,
> >
> > Sven
> >
> > -----Ursprüngliche Nachricht-----
> > Von: samba [mailto:samba-bounces at lists.samba.org] Im Auftrag von L.P.H.
> > van Belle via samba
> > Gesendet: Mittwoch, 17. August 2016 08:37
> > An: samba at lists.samba.org
> > Betreff: Re: [Samba] Windows 10 point and print restriction
> >
> > Hai Sven,
> >
> > Thanks  you for reporting back.
> > Now, anything left thats not working? I saw the message about the
> driver.
> >
> > >thanks fort he driver.
> > >
> > >It works not by me. I removed the kb ? i send it to mailing list. I
> don?t
> > >know. I have other driver but it don?t resolve the problem.
> > >
> > >Do you need more info?
> >
> > What is the problem here? I lost what this problem is/was...
> >
> > Greetz,
> >
> > Louis
> >
> >
> >
> > > -----Oorspronkelijk bericht-----
> > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Vogel, Sven
> > > via samba
> > > Verzonden: dinsdag 16 augustus 2016 16:28
> > > Aan: 'samba at lists.samba.org'
> > > Onderwerp: Re: [Samba] Windows 10 point and print restriction
> > >
> > > Hi Louis,
> > >
> > > I solved the problem when I remove the KB3176493 and KB3172729. I
> > > don?t know normally KB3172729 has nothing to do with these point and
> > > print problem but after remove both of them it works.
> > >
> > > I use a Windows 10 N 1511 Build 10586.545.
> > >
> > > I hope that help other people here.
> > >
> > > Greetz
> > >
> > > Sven
> > >
> >
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba