Print server, client prompted to update driver but can't because now they need admin rights. what to do?

Question

Print server, client prompted to update driver but can't because now they need admin rights. what to do?
We can't give users admin rights, thats the quickest way to get hacked, spread a virus, etc.
no users have admin rights.
Is there a way to stop automatic driver prompt from a network printer until this is sorted?
we dont want users prompted for a driver update?
we didnt update a printer driver, it just was maybe requested from client?

Answer 1

Hi there,

After the installation of Microsoft patch KB3170455, users may get prompted to enter an admin username and password, even though in Group Policy it's set so that these drivers should install without such credentials.
There is a 'workaround', which will allow the install of the network printer, without asking for credentials.

1. Open Regedit and browse to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments<window kernel version>\Drivers\Version-3<driver name>

If the server has drivers for x86 and x64 installed, then there are two keys for each driver, hence: <windows kernel version> The following change needs to be done for both versions of the driver
2. In the right hand column of Regedit, double click the key PrinterDriverAttributes and add a 1 to the end of the 'Data value:'.
3. Close Regedit and restart the Printer Spooler service for the registry change to take effect.

Hope this Answers all your queries , if not please do repost back .
If an Answer is helpful, please click "Accept Answer" and upvote it : )

Answer 2

Hello @iconoclast88

You might also want to check this article for Driver deployment post PrintNightmare vulnerability patch:

https://support.microsoft.com/en-us/topic/kb5005652-manage-new-point-and-print-default-driver-installation-behavior-cve-2021-34481-873642bf-2634-49c5-a23b-6d8e9a302872

Best regards,

Answer 3

Hi just to follow up, this adjustment. Does it bypass the security fix msft put in place somehow? Our goal isn't to simply get printing working again, but to get printing again securely. thanks.

Answer 4

any luck to the above issue?