question

iconoclast88 avatar image
0 Votes"
iconoclast88 asked SyedFahadAli-5266 published

Print server, client prompted to update driver but can't because now they need admin rights. what to do?

Print server, client prompted to update driver but can't because now they need admin rights. what to do?
We can't give users admin rights, thats the quickest way to get hacked, spread a virus, etc.
no users have admin rights.
Is there a way to stop automatic driver prompt from a network printer until this is sorted?
we dont want users prompted for a driver update?
we didnt update a printer driver, it just was maybe requested from client?

windows-server-print
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered iconoclast88 commented

Hi there,

After the installation of Microsoft patch KB3170455, users may get prompted to enter an admin username and password, even though in Group Policy it's set so that these drivers should install without such credentials.
There is a 'workaround', which will allow the install of the network printer, without asking for credentials.

  1. Open Regedit and browse to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments<window kernel version>\Drivers\Version-3<driver name>

If the server has drivers for x86 and x64 installed, then there are two keys for each driver, hence: <windows kernel version> The following change needs to be done for both versions of the driver
2. In the right hand column of Regedit, double click the key PrinterDriverAttributes and add a 1 to the end of the 'Data value:'.
3. Close Regedit and restart the Printer Spooler service for the registry change to take effect.

Hope this Answers all your queries , if not please do repost back .
If an Answer is helpful, please click "Accept Answer" and upvote it : )

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for the reply.
Doesn't this create a vulnerability in bypassing admin-credentials somehow? i mean, make it less secure?

0 Votes 0 ·
LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered

Hello @iconoclast88

You might also want to check this article for Driver deployment post PrintNightmare vulnerability patch:

https://support.microsoft.com/en-us/topic/kb5005652-manage-new-point-and-print-default-driver-installation-behavior-cve-2021-34481-873642bf-2634-49c5-a23b-6d8e9a302872

Best regards,

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

iconoclast88 avatar image
0 Votes"
iconoclast88 answered

Hi just to follow up, this adjustment. Does it bypass the security fix msft put in place somehow? Our goal isn't to simply get printing working again, but to get printing again securely. thanks.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SyedFahadAli-5266 avatar image
0 Votes"
SyedFahadAli-5266 answered SyedFahadAli-5266 published

any luck to the above issue?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.