Skip to content

Commit 501465f

Browse files
authored
Update README.md
1 parent 14bbd5c commit 501465f

File tree

1 file changed

+36
-0
lines changed

1 file changed

+36
-0
lines changed

mimispool/README.md

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -100,6 +100,8 @@ Remove-PrinterDriver -Name $driver
100100
## Protect
101101
_to adapt to your environment_
102102

103+
**Please, do not set `RestrictDriverInstallationToAdministrators` to `0` without these settings**
104+
103105
### Registry
104106

105107
#### `.reg` file
@@ -121,10 +123,44 @@ reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPri
121123
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint" /f /v PackagePointAndPrintOnly /t REG_DWORD /d 1
122124
```
123125

126+
### Registry with real printer servers and allowing non-administrators to install package P&P drivers & printers
127+
128+
#### `.reg` file
129+
```
130+
Windows Registry Editor Version 5.00
131+
132+
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint]
133+
"PackagePointAndPrintOnly"=dword:00000001
134+
"PackagePointAndPrintServerList"=dword:00000001
135+
136+
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\ListofServers]
137+
"srv1.fqdn"="srv1.fqdn"
138+
"srv2.fqdn"="srv2.fqdn"
139+
140+
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint]
141+
"RestrictDriverInstallationToAdministrators"=dword:00000000
142+
```
143+
144+
#### commands
145+
```
146+
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint" /f /v PackagePointAndPrintServerList /t REG_DWORD /d 1
147+
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\ListofServers" /f /v "srv1.fqdn" /t REG_SZ /d "srv1.fqdn"
148+
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\ListofServers" /f /v "srv2.fqdn" /t REG_SZ /d "srv2.fqdn"
149+
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint" /f /v PackagePointAndPrintOnly /t REG_DWORD /d 1
150+
151+
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /f /v RestrictDriverInstallationToAdministrators /t REG_DWORD /d 0
152+
```
153+
124154
### GPO / Local
125155

126156
In `Computer Configuration`, `Administrative Templates`, `Printers`, enable:
127157
- `Only use Package Point and Print`
128158
- `Package Point and Print - Approved servers`
129159

130160
![image](https://user-images.githubusercontent.com/2307945/129240741-b2a0ba14-6858-4c3f-ad07-07fa55efca29.png)
161+
162+
### GPO with real printer servers and allowing non-administrators to install package P&P drivers & printers
163+
164+
Same configuration as previously - _with real printer server names this time_ - but do not forget to add registry key `RestrictDriverInstallationToAdministrators` to `0`
165+
166+
![image](https://user-images.githubusercontent.com/2307945/133833820-a66b3ffd-a3aa-43a2-a1bf-14581a2a7492.png)

0 commit comments

Comments
 (0)