[Samba] Hosted printer drivers can not be used
Marco Gaiarin
gaio at sv.lnf.it
Thu Dec 19 11:15:15 UTC 2019
Mandi! L.P.H. van Belle via samba
In chel di` si favelave...
> You need a few things more to make this work.
We'll see...
> Expand the following branch in the Group Policy editor:
> Computer Configuration -> Policies -> Windows Settings
> -> Security Settings -> Local Policies -> Security Options,
> where you need to find the policy Devices: Prevent users from installing printer drivers.
> Disable this policy.
But policy editor say me that is disabled by default on workstation...
> Allow user to install the printer drivers via GPO.
> Allow non-administrators to install drivers for these device setup classes in the section :
> Computer Configuration -> Policies -> Administrative Templates -> System -> Driver Installation.
> Enable this policy, allow non-sysadmins to install drivers ( i dont know that its states in IT or English ).
> ( and today to lazy to look it up.. But you see and will find what i mean. )
>
> You need these also :
> Class = Printer {4658ee7e-f050-11d1-b6bd-00c04fa372a7}
> Class = PNPPrinters {4d36e979-e325-11ce-bfc1-08002be10318}
>
> When above is done, your at the point your now are. ( users can not connect/install the driver ) .
> Which is correct .. ;-)
But i don't need to have users install all the print drivers, only the
driver in domain servers...
> Computer Configuration -> Policies -> Administrative Templates -> Printers
> Enable the Point and print restrictions.
>
> set : do not show warning or elevation prompt when installing drivers for a new connection and when updating drivers for an existing connection
>
> And you also must assign trusted server in FQDN in the "point and print trusted servers"
> Disable only allow Point and Print within own forest.
Just done. These are standard settings i've just set in previous 'NT
mode' domains.
Anyway: drivers installation for users works as expected with other
drivers (eg, HP Laserjets PCL6) but does not work for KM drivers.
> Yes, then it always works, correct, so if you setup a new pc,
> you most probley always login at least once with an admin users.
> Create one gpo that installes all needed printers and while setting up a new pc.
> Drivers install in the back ground for you.
I prefere install printers by users, and if drivers have trouble, use
some other sort of things (eg, SCM WPKG) to install driver locally.
--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/
Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN)
marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797
Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
More information about the samba
mailing list