Hi everyone
Following KB5005652 from Microsoft that fix some security flaw (CVE-2021-34481) it’s now reported that some GPP can have difficulty to map the printer.
If it cause problem a registry key can be changed to allow the mapping and driver installation.
Keep in mind that registry key don’t need a restart, so it can be enable and disabled easilly in your GPO sequence.
The registry is: RestrictDriverInstallationToAdministrators
The location is: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint
You need to set it to 0 (DWORD)
It can be scripped that way too;
reg add “HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint” /v RestrictDriverInstallationToAdministrators /t REG_DWORD /d 1 /f
You can put it back on 1 after your last GPP has applied.
Thanks
Phil’s Blog | IT to the core ! 