[Samba] Point-and-Print driver installation asks for confirmation on current Windows

L.P.H. van Belle belle at bazuin.nl
Thu Sep 15 08:42:22 UTC 2016

>> change the .inf by yourself

When you do that, you get the message that the driver isnt signed. 


Ow.. And.. wait .. i'll get that beer..   ;-) ( at least working on it. ) 


Only tested it while entering the link : \\server.domain.tld\printershare  

Still testing the deployment, but im buzy also with lots of other things.

So go testing is slow here.. please do test and report back here. 


At least i can install the printer driver as user again. 

Try the following. 


Goto the policy.: 

Computer Configuration, Administrative Templates, System, and then Driver Installation.

Enable it, Klik below on Show. 

Add this GUID: 



( GUID found here : https://msdn.microsoft.com/en-us/library/windows/hardware/ff553426(v=vs.85).aspx ) 


Reboot you computer 2x !  ( first to apply the setting, second to make use of it. ) 


Not the best solution in my optionion but the best i could find out for now. 

We need better drivers from the printer suppliers, thats the only good fix. 








> -----Oorspronkelijk bericht-----

> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Olivier BILHAUT

> via samba

> Verzonden: maandag 12 september 2016 10:14

> Aan: samba at lists.samba.org

> Onderwerp: Re: [Samba] Point-and-Print driver installation asks for

> confirmation on current Windows




> Hi all.


> I have read carefully all your posts and I am glad to see

> that some of you workaround this new MS surprise...


> To solve the

> problem, I understand that :


>     * if you use the "AD way of deploying

> printers", the workaround is to use the "Computer

> ConfigurationPoliciesAdministrative TemplatesPrintersOverride Print

> Driver Compatibility Execution Setting Reported By Print Driver"

>     * You

> can change the printers drivers for new drivers which handle "driver

> isolation" (or change the .inf by yourself)

>     * On windows 7 sp1, you

> can also remove the KB3170435, we actually work on a script to do that

> if required


> But when you are on this situation :


>     * Using a

> home-made script for deploying printer connections (not the

> administrative templates)

>     * Using old drivers who do NOT and would

> NEVER handle "driver isolation"

>     * Changing the .inf of all the drivers

> is NOT an option (constructors have not yet released such officials

> drivers)


> We cannot find any solution for this situation except removing

> the KB itself.


> Note that the "point-and-print" GPO option

> (Computer/User) do not solve the problem, even using the FQDN name of

> the printer server. Particulary for the UPDATE of the printer driver. We

> always get the security prompt, forever !


> If some of them are in the

> same situation and manage to find a workaround, I pay a beer :)


> For

> now, we are about to remove the KB using a script.


> Cheers and thanks

> to all !

> --


> OB

> --

> To unsubscribe from this list go to the following URL and read the

> instructions:  https://lists.samba.org/mailman/options/samba


More information about the samba mailing list