windows:misc:allow_user_printer

Allow plain users to install printer drivers

If you need to allow any of your users to install printer drivers on the Windows box, follow these steps.

Remote Server Administration Tools for Windows 7

Below are sample GPO settings for all kind of printer installations just for your reference:

Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Devices: Prevent users from installing printer drivers - Disabled
Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\User Account Control: Detect application installations and prompt for elevation - Disabled
Computer Configuration\Policies\Administrative Templates\System\Driver Installation\Allow non-administrators to install drivers for these device setup classes - Enabled

Allowed device setup class GUIDs:

{4d36e979-e325-11ce-bfc1-08002be10318}
{4658ee7e-f050-11d1-b6bd-00c04fa372a7}

For more information, please also refer here

For the first one, if it is enabled, only Administrators can install a printer driver as part of connecting to a shared printer. If disabled, any user can install a printer driver as part of connecting to a shared printer. Default on workstations: Disabled. Please make sure it is Disabled.

For the second one, if it is Disabled, application installation packages are not detected and prompted for elevation. If Enabled, when an application installation package is detected that requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege.

Run Command Prompt with administrator privilege, then run

gpresult/v > C:\policy.txt

to see the current settings

  • windows/misc/allow_user_printer.txt
  • Last modified: 2019/10/31 09:06
  • by 127.0.0.1