Windows Client TechCenter > Windows 7 Forums > Windows 7 Miscellaneous > How do I remove the "Do you trust this printer?" dialogue?
Ask a questionAsk a question
 

AnswerHow do I remove the "Do you trust this printer?" dialogue?

  • Monday, May 25, 2009 7:21 AMHAL07 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    We are not admins on our computers. It seem to me that Win7 (Windows 7) do not let me add printers. It asks me for approving printer drivers. A dialogue comes up: Do you trust this printer?  Windows needs to download and install a software driver from \\server computer to print to <printer name>. ...

    I've disabled   User Configuration > Policies > Administrative Templates > Control Panel/Printers > Point and Print Restrictions     
    However it still asks me for confirmation.

    The exact same policy works fine on Windows Vista with UAC enabled.


    • Edited byHAL07 Wednesday, June 03, 2009 6:44 AM
    •  

Answers

  • Tuesday, September 01, 2009 7:59 AMAlex Koller Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    The Userbased GPO did also not work on Win 7 but the GPO fixed the problem on Vista.
    (User Configuration > Policies > Administrative Templates > Control Panel/Printers > Point and Print Restrictions)

    This settings applies to: Windows Vista and later (or should apply)

    Now I found annother policy which is in computer-based:
    (Computer Configuration > Policies > Administrative Templates > Printers > Point and Print Restrictions)
    I made some test with the local (gpedit.msc) policy. And it worked!
    The strange thing was: I did not find this policy on Vista :-/
    But this policy also applies to Vista and later...

    I configured a GPO for our Forest:
    User can only P&P to these servers => Disabled
    User can only P&P to machines in ther forest => Enabled
    When installing drivers for a new connection => Do not show warning or elevation prompt
    When installing drivers for an existing connection => Do not show warning or elevation prompt


    I hope this will fix your problem.

    PS: The policy works fine with UAC enabled

    Also see the Solution from 'matambanadzo'
    • Proposed As Answer byAlex Koller Tuesday, September 01, 2009 8:00 AM
    • Marked As Answer byHAL07 Tuesday, September 01, 2009 8:15 AM
    • Edited byAlex Koller Wednesday, November 04, 2009 7:23 AM
    •  

All Replies

  • Tuesday, May 26, 2009 12:13 PMTravis Peterson Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I am experiencing the exact same issue. I have disabled the same policy and recieve the same message. I know it works in Vista also, I have a GPO applied to several OU's. I hope somebody reviews this thread quickly and has a response.
  • Tuesday, June 09, 2009 12:54 PMHAL07 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hello Microsoft? Are you planning to work against us on this one? I see newer builds still have this message.
    Are you planning to enforce us to use the new GPO's?
  • Thursday, June 11, 2009 9:25 AMSanmartin Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Have you checked Local Security Policies -> Security Settings -> Local Policies -> Security Options "Devices: Prevent users from installing printer drivers"?
    Mobile AMD64 3000+, VIA Apollo K8T800 chipset, 1 G RAM, ATIRadeonMobility 9700, 20x DVDRW, C:XPSP3 (55G),D:WIN7 (25G),F:DATA (250G)
  • Friday, June 12, 2009 8:22 AMHAL07 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Thanks for your input Sanmartin :)

    However I now tested this and it's still the same annoying "Do you trust this printer?" dialogue.
  • Friday, June 12, 2009 11:17 AMSanmartin Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    News! Found this: http://msdn.microsoft.com/en-us/library/dd162838(VS.85).aspx. Look under "dw flags":

    "Windows 7: In Windows 7 and later versions of Windows [o-ho!], if this flag is set and the user is running in elevated mode, the Do you trust this printer? dialog will not be shown."
    Mobile AMD64 3000+, VIA Apollo K8T800 chipset, 1 G RAM, ATIRadeonMobility 9700, 20x DVDRW, C:XPSP3 (55G),D:WIN7 (25G),F:DATA (250G)
    • Edited bySanmartin Friday, June 12, 2009 5:24 PM
    •  
  • Monday, June 15, 2009 7:06 AMHAL07 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Thanks for the info. Not sure if I understand, as the user is not elevated.  Anyways, I'm not sure how Microsoft expect us to map printers.
  • Monday, June 15, 2009 7:53 AMSanmartin Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I'm no technician, but from what I understand from the quote, you must be in elevated mode or you will get the "Do you trust this printer?" dialogue.
    Mobile AMD64 3000+, VIA Apollo K8T800 chipset, 1 G RAM, ATIRadeonMobility 9700, 20x DVDRW, C:XPSP3 (55G),D:WIN7 (25G),F:DATA (250G)
  • Thursday, July 02, 2009 11:06 AMHAL07 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    yes that is true. however it does not solve my problem at all.
  • Thursday, July 02, 2009 2:28 PMMr. Seven Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    Out of curiosity if you answer yes to this dialogue can you then install your printer?
    If you were to install the driver through the device manager it may not ask.

  • Friday, July 03, 2009 5:58 AMHAL07 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Yes would install, however it will bother the user a LOT if you have like 10 printers which we mostly deploy to our users at different offices, depending on where he/she logs in to.
  • Friday, July 17, 2009 3:52 PMjaklep Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Proposed Answer
    These settings have been moved to the Local_Machine hive for Windows 7.  You need to use a Windows 7 machine to manage the two sets of policies (Machine for Windows 7, User for Pre-Windows 7)

    If you do it this way, you won't have any issues. 
    • Proposed As Answer byAlex Koller Tuesday, September 01, 2009 8:00 AM
    •  
  • Friday, July 17, 2009 4:17 PMMr. Seven Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    For a corporate environment Re-package your printer drivers to deploy automatically from a single executable. 


    If it isn't Mr. Seven it's not.

    • Edited byMr. Seven Saturday, July 18, 2009 4:56 AM
    •  
  • Tuesday, August 04, 2009 7:18 AMHAL07 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    It has been brought to my attention that this problem is also present in the RTM release. So I wonder why this move Microsoft?
    Also, even when confirming each printer, each printer install takes a very long time.
  • Tuesday, September 01, 2009 7:59 AMAlex Koller Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    The Userbased GPO did also not work on Win 7 but the GPO fixed the problem on Vista.
    (User Configuration > Policies > Administrative Templates > Control Panel/Printers > Point and Print Restrictions)

    This settings applies to: Windows Vista and later (or should apply)

    Now I found annother policy which is in computer-based:
    (Computer Configuration > Policies > Administrative Templates > Printers > Point and Print Restrictions)
    I made some test with the local (gpedit.msc) policy. And it worked!
    The strange thing was: I did not find this policy on Vista :-/
    But this policy also applies to Vista and later...

    I configured a GPO for our Forest:
    User can only P&P to these servers => Disabled
    User can only P&P to machines in ther forest => Enabled
    When installing drivers for a new connection => Do not show warning or elevation prompt
    When installing drivers for an existing connection => Do not show warning or elevation prompt


    I hope this will fix your problem.

    PS: The policy works fine with UAC enabled

    Also see the Solution from 'matambanadzo'
    • Proposed As Answer byAlex Koller Tuesday, September 01, 2009 8:00 AM
    • Marked As Answer byHAL07 Tuesday, September 01, 2009 8:15 AM
    • Edited byAlex Koller Wednesday, November 04, 2009 7:23 AM
    •  
  • Tuesday, September 01, 2009 8:15 AMHAL07 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I think you just made my day! :) Thank you very much.
  • Wednesday, November 04, 2009 6:33 AMmatambanadzo Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Proposed Answer
    The answer DOES work. Thank you!

    For everyone else who stumbles upon this page, I'm going to clarify because the answer is not very clear.

    If you want print drivers to add automatically when the user logs in without it prompting to "Install Driver" do this:

    In the computer's Group Policy Object:

    Find: Computer Configuration > Policies > Adminstrative Templates > Printers > Point and Print Restrictions

    > Change it to Enabled
    > Change the following settings:

    Users can only point and print to these servers > Unticked (Disabled)
    Users can only point and print to machines in their forest > Enabled
    When installing drivers for a new connection > Do not show warning or elevation prompt
    When updating drivers for an existing connection > Do not show warning or elevation prompt

    If the computer is on during this process, run "gpupdate /force /boot" in the command line. (without quotes)
    After the restart it should add the printers in the login script that apply to the user logging in without prompting to install any drivers.
    • Proposed As Answer byAlex Koller Wednesday, November 04, 2009 7:21 AM
    •  
  • Wednesday, November 04, 2009 7:21 AMAlex Koller Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    No Problem...

    Thank you for your "how to" ;-)