Recursos para Profesionales de TI > Página principal de foros > Windows 7 Miscellaneous > How do I remove the "Do you trust this printer?" dialogue?
Formular una preguntaFormular una pregunta
 

RespondidaHow do I remove the "Do you trust this printer?" dialogue?

  • lunes, 25 de mayo de 2009 7:21HAL07 Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    We are not admins on our computers. It seem to me that Win7 (Windows 7) do not let me add printers. It asks me for approving printer drivers. A dialogue comes up: Do you trust this printer?  Windows needs to download and install a software driver from \\server computer to print to <printer name>. ...

    I've disabled   User Configuration > Policies > Administrative Templates > Control Panel/Printers > Point and Print Restrictions     
    However it still asks me for confirmation.

    The exact same policy works fine on Windows Vista with UAC enabled.


    • EditadoHAL07 miércoles, 03 de junio de 2009 6:44
    •  

Respuestas

  • martes, 01 de septiembre de 2009 7:59Alex Koller Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     Respondida
    The Userbased GPO did also not work on Win 7 but the GPO fixed the problem on Vista.
    (User Configuration > Policies > Administrative Templates > Control Panel/Printers > Point and Print Restrictions)

    This settings applies to: Windows Vista and later (or should apply)

    Now I found annother policy which is in computer-based:
    (Computer Configuration > Policies > Administrative Templates > Printers > Point and Print Restrictions)
    I made some test with the local (gpedit.msc) policy. And it worked!
    The strange thing was: I did not find this policy on Vista :-/
    But this policy also applies to Vista and later...

    I configured a GPO for our Forest:
    User can only P&P to these servers => Disabled
    User can only P&P to machines in ther forest => Enabled
    When installing drivers for a new connection => Do not show warning or elevation prompt
    When installing drivers for an existing connection => Do not show warning or elevation prompt


    I hope this will fix your problem.

    PS: The policy works fine with UAC enabled

    Also see the Solution from 'matambanadzo'
    • Propuesto como respuestaAlex Koller martes, 01 de septiembre de 2009 8:00
    • Marcado como respuestaHAL07 martes, 01 de septiembre de 2009 8:15
    • EditadoAlex Koller miércoles, 04 de noviembre de 2009 7:23
    •  

Todas las respuestas

  • martes, 26 de mayo de 2009 12:13Travis Peterson Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    I am experiencing the exact same issue. I have disabled the same policy and recieve the same message. I know it works in Vista also, I have a GPO applied to several OU's. I hope somebody reviews this thread quickly and has a response.
  • martes, 09 de junio de 2009 12:54HAL07 Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    Hello Microsoft? Are you planning to work against us on this one? I see newer builds still have this message.
    Are you planning to enforce us to use the new GPO's?
  • jueves, 11 de junio de 2009 9:25Sanmartin Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    Have you checked Local Security Policies -> Security Settings -> Local Policies -> Security Options "Devices: Prevent users from installing printer drivers"?
    Mobile AMD64 3000+, VIA Apollo K8T800 chipset, 1 G RAM, ATIRadeonMobility 9700, 20x DVDRW, C:XPSP3 (55G),D:WIN7 (25G),F:DATA (250G)
  • viernes, 12 de junio de 2009 8:22HAL07 Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    Thanks for your input Sanmartin :)

    However I now tested this and it's still the same annoying "Do you trust this printer?" dialogue.
  • viernes, 12 de junio de 2009 11:17Sanmartin Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    News! Found this: http://msdn.microsoft.com/en-us/library/dd162838(VS.85).aspx. Look under "dw flags":

    "Windows 7: In Windows 7 and later versions of Windows [o-ho!], if this flag is set and the user is running in elevated mode, the Do you trust this printer? dialog will not be shown."
    Mobile AMD64 3000+, VIA Apollo K8T800 chipset, 1 G RAM, ATIRadeonMobility 9700, 20x DVDRW, C:XPSP3 (55G),D:WIN7 (25G),F:DATA (250G)
    • EditadoSanmartin viernes, 12 de junio de 2009 17:24
    •  
  • lunes, 15 de junio de 2009 7:06HAL07 Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    Thanks for the info. Not sure if I understand, as the user is not elevated.  Anyways, I'm not sure how Microsoft expect us to map printers.
  • lunes, 15 de junio de 2009 7:53Sanmartin Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    I'm no technician, but from what I understand from the quote, you must be in elevated mode or you will get the "Do you trust this printer?" dialogue.
    Mobile AMD64 3000+, VIA Apollo K8T800 chipset, 1 G RAM, ATIRadeonMobility 9700, 20x DVDRW, C:XPSP3 (55G),D:WIN7 (25G),F:DATA (250G)
  • jueves, 02 de julio de 2009 11:06HAL07 Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    yes that is true. however it does not solve my problem at all.
  • jueves, 02 de julio de 2009 14:28DEFCON 1 Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     

    Out of curiosity if you answer yes to this dialogue can you then install your printer?
    If you were to install the driver through the device manager it may not ask.

  • viernes, 03 de julio de 2009 5:58HAL07 Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    Yes would install, however it will bother the user a LOT if you have like 10 printers which we mostly deploy to our users at different offices, depending on where he/she logs in to.
  • viernes, 17 de julio de 2009 15:52jaklep Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     Respuesta propuesta
    These settings have been moved to the Local_Machine hive for Windows 7.  You need to use a Windows 7 machine to manage the two sets of policies (Machine for Windows 7, User for Pre-Windows 7)

    If you do it this way, you won't have any issues. 
    • Propuesto como respuestaAlex Koller martes, 01 de septiembre de 2009 8:00
    •  
  • viernes, 17 de julio de 2009 16:17DEFCON 1 Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     

    For a corporate environment Re-package your printer drivers to deploy automatically from a single executable. 


    If it isn't Mr. Seven it's not.

    • EditadoDEFCON 1 sábado, 18 de julio de 2009 4:56
    •  
  • martes, 04 de agosto de 2009 7:18HAL07 Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    It has been brought to my attention that this problem is also present in the RTM release. So I wonder why this move Microsoft?
    Also, even when confirming each printer, each printer install takes a very long time.
  • martes, 01 de septiembre de 2009 7:59Alex Koller Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     Respondida
    The Userbased GPO did also not work on Win 7 but the GPO fixed the problem on Vista.
    (User Configuration > Policies > Administrative Templates > Control Panel/Printers > Point and Print Restrictions)

    This settings applies to: Windows Vista and later (or should apply)

    Now I found annother policy which is in computer-based:
    (Computer Configuration > Policies > Administrative Templates > Printers > Point and Print Restrictions)
    I made some test with the local (gpedit.msc) policy. And it worked!
    The strange thing was: I did not find this policy on Vista :-/
    But this policy also applies to Vista and later...

    I configured a GPO for our Forest:
    User can only P&P to these servers => Disabled
    User can only P&P to machines in ther forest => Enabled
    When installing drivers for a new connection => Do not show warning or elevation prompt
    When installing drivers for an existing connection => Do not show warning or elevation prompt


    I hope this will fix your problem.

    PS: The policy works fine with UAC enabled

    Also see the Solution from 'matambanadzo'
    • Propuesto como respuestaAlex Koller martes, 01 de septiembre de 2009 8:00
    • Marcado como respuestaHAL07 martes, 01 de septiembre de 2009 8:15
    • EditadoAlex Koller miércoles, 04 de noviembre de 2009 7:23
    •  
  • martes, 01 de septiembre de 2009 8:15HAL07 Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    I think you just made my day! :) Thank you very much.
  • miércoles, 04 de noviembre de 2009 6:33matambanadzo Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     Respuesta propuesta
    The answer DOES work. Thank you!

    For everyone else who stumbles upon this page, I'm going to clarify because the answer is not very clear.

    If you want print drivers to add automatically when the user logs in without it prompting to "Install Driver" do this:

    In the computer's Group Policy Object:

    Find: Computer Configuration > Policies > Adminstrative Templates > Printers > Point and Print Restrictions

    > Change it to Enabled
    > Change the following settings:

    Users can only point and print to these servers > Unticked (Disabled)
    Users can only point and print to machines in their forest > Enabled
    When installing drivers for a new connection > Do not show warning or elevation prompt
    When updating drivers for an existing connection > Do not show warning or elevation prompt

    If the computer is on during this process, run "gpupdate /force /boot" in the command line. (without quotes)
    After the restart it should add the printers in the login script that apply to the user logging in without prompting to install any drivers.
    • Propuesto como respuestaAlex Koller miércoles, 04 de noviembre de 2009 7:21
    •  
  • miércoles, 04 de noviembre de 2009 7:21Alex Koller Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    No Problem...

    Thank you for your "how to" ;-)
  • lunes, 30 de noviembre de 2009 20:04Philip Horan Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    Hi. To comment on the resolution below. I am deploying scripts via Group Policy on Windows 2003 R2 domain to Windows 7 clients. As with others who have posted the scripts run OK for both XP and Vista clients. The options detailed below are not available on the server. Any answers as to how to manage printer deployment globally?
    w
    If you want print drivers to add automatically when the user logs in without it prompting to "Install Driver" do this:

    In the computer's Group Policy Object:

    Find: Computer Configuration > Policies > Adminstrative Templates > Printers > Point and Print Restrictions

    > Change it to Enabled
    > Change the following settings:

    Users can only point and print to these servers > Unticked (Disabled)
    Users can only point and print to machines in their forest > Enabled
    When installing drivers for a new connection > Do not show warning or elevation prompt
    When updating drivers for an existing connection > Do not show warning or elevation prompt

    Kind Regards,
    Phil.

    IT Manager