@@ -100,6 +100,8 @@ Remove-PrinterDriver -Name $driver
100
100
## Protect
101
101
_ to adapt to your environment_
102
102
103
+ ** Please, do not set ` RestrictDriverInstallationToAdministrators ` to ` 0 ` without these settings**
104
+
103
105
### Registry
104
106
105
107
#### ` .reg ` file
@@ -121,10 +123,44 @@ reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPri
121
123
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint" /f /v PackagePointAndPrintOnly /t REG_DWORD /d 1
122
124
```
123
125
126
+ ### Registry with real printer servers and allowing non-administrators to install package P&P drivers & printers
127
+
128
+ #### ` .reg ` file
129
+ ```
130
+ Windows Registry Editor Version 5.00
131
+
132
+ [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint]
133
+ "PackagePointAndPrintOnly"=dword:00000001
134
+ "PackagePointAndPrintServerList"=dword:00000001
135
+
136
+ [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\ListofServers]
137
+ "srv1.fqdn"="srv1.fqdn"
138
+ "srv2.fqdn"="srv2.fqdn"
139
+
140
+ [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint]
141
+ "RestrictDriverInstallationToAdministrators"=dword:00000000
142
+ ```
143
+
144
+ #### commands
145
+ ```
146
+ reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint" /f /v PackagePointAndPrintServerList /t REG_DWORD /d 1
147
+ reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\ListofServers" /f /v "srv1.fqdn" /t REG_SZ /d "srv1.fqdn"
148
+ reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\ListofServers" /f /v "srv2.fqdn" /t REG_SZ /d "srv2.fqdn"
149
+ reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint" /f /v PackagePointAndPrintOnly /t REG_DWORD /d 1
150
+
151
+ reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /f /v RestrictDriverInstallationToAdministrators /t REG_DWORD /d 0
152
+ ```
153
+
124
154
### GPO / Local
125
155
126
156
In ` Computer Configuration ` , ` Administrative Templates ` , ` Printers ` , enable:
127
157
- ` Only use Package Point and Print `
128
158
- ` Package Point and Print - Approved servers `
129
159
130
160
![ image] ( https://user-images.githubusercontent.com/2307945/129240741-b2a0ba14-6858-4c3f-ad07-07fa55efca29.png )
161
+
162
+ ### GPO with real printer servers and allowing non-administrators to install package P&P drivers & printers
163
+
164
+ Same configuration as previously - _ with real printer server names this time_ - but do not forget to add registry key ` RestrictDriverInstallationToAdministrators ` to ` 0 `
165
+
166
+ ![ image] ( https://user-images.githubusercontent.com/2307945/133833820-a66b3ffd-a3aa-43a2-a1bf-14581a2a7492.png )
0 commit comments