![]() ![]() If this policy setting is enabled, but the driver for a network printer already exists on the local computer, users can still add the network printer. Only users in the Administrative, Power User, or Server Operator groups will be able to install printers on servers. It's advisable to set Devices: Prevent users from installing printer drivers to Enabled.A malicious user might deliberately try to damage the system by installing inappropriate printer drivers. Only administrators should have this user right on servers. Installing a printer driver on a server can cause the system to become less stable. If the trusted path download fails, the driver isn't installed and the network printer isn't added.Īlthough it might be appropriate in some organizations to allow users to install printer drivers on their own workstations, this idea isn't suitable for servers. If the trusted path download succeeds, the driver is installed on behalf of any user. If trusted paths are being used, the print subsystem attempts to use the trusted path to download the driver. This setting has no impact if you've configured a trusted path for downloading drivers. This setting prevents unprivileged users from downloading and installing an untrusted printer driver. Setting the value to Disabled allows any user to install a printer driver as part of adding a network printer. When you set the value to Enabled, only Administrators and Power Users can install a printer driver as part of adding a network printer. ![]() The Devices: Prevent users from installing printer drivers policy setting determines who can install a printer driver as part of adding a network printer. Referenceįor a device to print to a network printer, the driver for that network printer must be installed locally. ![]() Describes the best practices, location, values, and security considerations for the Devices: Prevent users from installing printer drivers security policy setting.
0 Comments
Leave a Reply. |