Packaged printer drivers

[chulerico]

Notice that with this update KB3170455, you end up getting warning "do you trust this printer"?

updating the drivers or removing the patch gets rid of the warning, where the users receive the printer, but without drivers, thus they can't print in a floating pool refresh at log off setup.

Sam

[Ray_handels · Accepted solution]

There is a windows GPO in which you can set this behaviour regarding trusted print servers.

You should have a look at the Machine GPO in Administrative Templates --> Printers.

I would first disable the " Users can only point to these print servers" policy. And also try to set the "Do not show warning or elevation prompt" for When installing drivers for a new connection  and When updateing drivers for an existing connection. It might just do the trick.

[chulerico]

Ray,

yes that's the normal setting (which prevents the warning), but now (this is a recent patch) if the computer have above path, and driver is not packaged it gives the error, the first thing you think is that the GPO setting is being ignored/not working, which is not the case, so warning is misleading.

Thanks

Sam

[anvr]

Hi,

"If you have trouble deploying printers after applying critical updates according to MS16-087 (KB3170455) try this tweak: Edit the register on your print server. If you change the value of the key PrinterDriverAttributes under HKLM\System\CurrentControlSet\Control\Print\Enviroments\Windowsx64\Drivers\...\Driver name\ and restart the print server, you are able to make Windows treat the driver as packaged, and it will install unattended with gpo. The hex number has to be odd, i.e. 41

Restart server .

According to MS the 1 flag for PrinterDriverAttributes stands for PRINTER_DRIVER_PACKAGE_AWARE. This will treat the driver as package aware, which means a CAB package will be created, including the inf and the catalog. The package will be installed through setupapi.dll when installing the driver, validating that the catalog is trusted, and that hashes for all files are included in the catalog."