IT 专业人士的资源 > 论坛主页 > Windows 7 Miscellaneous > How do I remove the "Do you trust this printer?" dialogue?
提出问题提出问题
 

已答复How do I remove the "Do you trust this printer?" dialogue?

  • 2009年5月25日 7:21HAL07 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    We are not admins on our computers. It seem to me that Win7 (Windows 7) do not let me add printers. It asks me for approving printer drivers. A dialogue comes up: Do you trust this printer?  Windows needs to download and install a software driver from \\server computer to print to <printer name>. ...

    I've disabled   User Configuration > Policies > Administrative Templates > Control Panel/Printers > Point and Print Restrictions     
    However it still asks me for confirmation.

    The exact same policy works fine on Windows Vista with UAC enabled.


    • 已编辑HAL07 2009年6月3日 6:44
    •  

答案

  • 2009年9月1日 7:59Alex Koller 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     已答复
    The Userbased GPO did also not work on Win 7 but the GPO fixed the problem on Vista.
    (User Configuration > Policies > Administrative Templates > Control Panel/Printers > Point and Print Restrictions)

    This settings applies to: Windows Vista and later (or should apply)

    Now I found annother policy which is in computer-based:
    (Computer Configuration > Policies > Administrative Templates > Printers > Point and Print Restrictions)
    I made some test with the local (gpedit.msc) policy. And it worked!
    The strange thing was: I did not find this policy on Vista :-/
    But this policy also applies to Vista and later...

    I configured a GPO for our Forest:
    User can only P&P to these servers => Disabled
    User can only P&P to machines in ther forest => Enabled
    When installing drivers for a new connection => Do not show warning or elevation prompt
    When installing drivers for an existing connection => Do not show warning or elevation prompt


    I hope this will fix your problem.

    PS: The policy works fine with UAC enabled

    Also see the Solution from 'matambanadzo'

全部回复

  • 2009年5月26日 12:13Travis Peterson 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    I am experiencing the exact same issue. I have disabled the same policy and recieve the same message. I know it works in Vista also, I have a GPO applied to several OU's. I hope somebody reviews this thread quickly and has a response.
  • 2009年6月9日 12:54HAL07 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    Hello Microsoft? Are you planning to work against us on this one? I see newer builds still have this message.
    Are you planning to enforce us to use the new GPO's?
  • 2009年6月11日 9:25Sanmartin 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    Have you checked Local Security Policies -> Security Settings -> Local Policies -> Security Options "Devices: Prevent users from installing printer drivers"?
    Mobile AMD64 3000+, VIA Apollo K8T800 chipset, 1 G RAM, ATIRadeonMobility 9700, 20x DVDRW, C:XPSP3 (55G),D:WIN7 (25G),F:DATA (250G)
  • 2009年6月12日 8:22HAL07 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    Thanks for your input Sanmartin :)

    However I now tested this and it's still the same annoying "Do you trust this printer?" dialogue.
  • 2009年6月12日 11:17Sanmartin 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    News! Found this: http://msdn.microsoft.com/en-us/library/dd162838(VS.85).aspx. Look under "dw flags":

    "Windows 7: In Windows 7 and later versions of Windows [o-ho!], if this flag is set and the user is running in elevated mode, the Do you trust this printer? dialog will not be shown."
    Mobile AMD64 3000+, VIA Apollo K8T800 chipset, 1 G RAM, ATIRadeonMobility 9700, 20x DVDRW, C:XPSP3 (55G),D:WIN7 (25G),F:DATA (250G)
  • 2009年6月15日 7:06HAL07 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    Thanks for the info. Not sure if I understand, as the user is not elevated.  Anyways, I'm not sure how Microsoft expect us to map printers.
  • 2009年6月15日 7:53Sanmartin 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    I'm no technician, but from what I understand from the quote, you must be in elevated mode or you will get the "Do you trust this printer?" dialogue.
    Mobile AMD64 3000+, VIA Apollo K8T800 chipset, 1 G RAM, ATIRadeonMobility 9700, 20x DVDRW, C:XPSP3 (55G),D:WIN7 (25G),F:DATA (250G)
  • 2009年7月2日 11:06HAL07 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    yes that is true. however it does not solve my problem at all.
  • 2009年7月2日 14:28DEFCON 1 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     

    Out of curiosity if you answer yes to this dialogue can you then install your printer?
    If you were to install the driver through the device manager it may not ask.

  • 2009年7月3日 5:58HAL07 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    Yes would install, however it will bother the user a LOT if you have like 10 printers which we mostly deploy to our users at different offices, depending on where he/she logs in to.
  • 2009年7月17日 15:52jaklep 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     建议的答复
    These settings have been moved to the Local_Machine hive for Windows 7.  You need to use a Windows 7 machine to manage the two sets of policies (Machine for Windows 7, User for Pre-Windows 7)

    If you do it this way, you won't have any issues. 
  • 2009年7月17日 16:17DEFCON 1 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     

    For a corporate environment Re-package your printer drivers to deploy automatically from a single executable. 


    If it isn't Mr. Seven it's not.

  • 2009年8月4日 7:18HAL07 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    It has been brought to my attention that this problem is also present in the RTM release. So I wonder why this move Microsoft?
    Also, even when confirming each printer, each printer install takes a very long time.
  • 2009年9月1日 7:59Alex Koller 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     已答复
    The Userbased GPO did also not work on Win 7 but the GPO fixed the problem on Vista.
    (User Configuration > Policies > Administrative Templates > Control Panel/Printers > Point and Print Restrictions)

    This settings applies to: Windows Vista and later (or should apply)

    Now I found annother policy which is in computer-based:
    (Computer Configuration > Policies > Administrative Templates > Printers > Point and Print Restrictions)
    I made some test with the local (gpedit.msc) policy. And it worked!
    The strange thing was: I did not find this policy on Vista :-/
    But this policy also applies to Vista and later...

    I configured a GPO for our Forest:
    User can only P&P to these servers => Disabled
    User can only P&P to machines in ther forest => Enabled
    When installing drivers for a new connection => Do not show warning or elevation prompt
    When installing drivers for an existing connection => Do not show warning or elevation prompt


    I hope this will fix your problem.

    PS: The policy works fine with UAC enabled

    Also see the Solution from 'matambanadzo'
  • 2009年9月1日 8:15HAL07 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    I think you just made my day! :) Thank you very much.
  • 2009年11月4日 6:33matambanadzo 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     建议的答复
    The answer DOES work. Thank you!

    For everyone else who stumbles upon this page, I'm going to clarify because the answer is not very clear.

    If you want print drivers to add automatically when the user logs in without it prompting to "Install Driver" do this:

    In the computer's Group Policy Object:

    Find: Computer Configuration > Policies > Adminstrative Templates > Printers > Point and Print Restrictions

    > Change it to Enabled
    > Change the following settings:

    Users can only point and print to these servers > Unticked (Disabled)
    Users can only point and print to machines in their forest > Enabled
    When installing drivers for a new connection > Do not show warning or elevation prompt
    When updating drivers for an existing connection > Do not show warning or elevation prompt

    If the computer is on during this process, run "gpupdate /force /boot" in the command line. (without quotes)
    After the restart it should add the printers in the login script that apply to the user logging in without prompting to install any drivers.
  • 2009年11月4日 7:21Alex Koller 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    No Problem...

    Thank you for your "how to" ;-)
  • 4 小时 53 分钟以前Philip Horan 用户奖牌用户奖牌用户奖牌用户奖牌用户奖牌
     
    Hi. To comment on the resolution below. I am deploying scripts via Group Policy on Windows 2003 R2 domain to Windows 7 clients. As with others who have posted the scripts run OK for both XP and Vista clients. The options detailed below are not available on the server. Any answers as to how to manage printer deployment globally?
    w
    If you want print drivers to add automatically when the user logs in without it prompting to "Install Driver" do this:

    In the computer's Group Policy Object:

    Find: Computer Configuration > Policies > Adminstrative Templates > Printers > Point and Print Restrictions

    > Change it to Enabled
    > Change the following settings:

    Users can only point and print to these servers > Unticked (Disabled)
    Users can only point and print to machines in their forest > Enabled
    When installing drivers for a new connection > Do not show warning or elevation prompt
    When updating drivers for an existing connection > Do not show warning or elevation prompt

    Kind Regards,
    Phil.

    IT Manager