Point and Print with Windows 7 RC1 in a domain 32 bit
I joined a machine to a 2008 domain and as the administrator I am able to use shared printers from our 32 bit 2003 print-server without problems. If a domain user with power-user rights on the w7 client logs on and wants to add the shared printerthe UAC prompts and you have to sign on with an administrator account. This is not practicable. I already deactivated the point and print restrictions in the domain-GPO, without luck. Also lowering the UAC-Level to 3/4 didn't help.What to do?
May 20th, 2009 5:00pm

I am also having the same issued with Windows 7 RC1 and Point and Print. The beta version was working with the GPO Point and Print disabled.
Free Windows Admin Tool Kit Click here and download it now
May 28th, 2009 7:35pm

I've found a workaround for this issue.Win2003 Admin Template for Point and Print options for GP are set in User Policy. When I disjoined Win7 RC1 from the domain to investigate the Local Policy options, I noticed that Point and Print options were available via User AND Computer policy.Import the below reg. entry using Group Policy Preferences.---------Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint]"InForest"=dword:00000000"Restricted"=dword:00000000"TrustedServers"=dword:00000000
May 28th, 2009 9:45pm

it works now! Perfect!
Free Windows Admin Tool Kit Click here and download it now
June 3rd, 2009 12:11pm

I've been testing this on Windows 7 RTM 32-bit and found out that you have to apply the GPO to both the user and computer OUs to block the warning and elevation prompts. In Vista I only had to apply to the User OU. This is probably better for security. Here are my GPO settings that are working.I've also noticed Win7 changing the default printer automatically sometimes when mapping printers, but I'll save that for another thread. Computer Configuration (Enabled)hide Policieshide Administrative Templateshide Policy definitions (ADMX files) retrieved from the local machine. Printershide PolicySettingComment Point and Print Restrictions Enabled Users can only point and print to these servers: Enabled Enter fully qualified server names separated by semicolons myprintserver.mydomain.local Users can only point and print to machines in their forest Disabled Security Prompts: When installing drivers for a new connection: Do not show warning or elevation prompt When updating drivers for an existing connection: Do not show warning or elevation prompt This setting only applies to: Windows Vista and later User Configuration (Enabled)hide Policieshide Administrative Templateshide Policy definitions (ADMX files) retrieved from the local machine. Control Panel/Printershide PolicySettingComment Point and Print Restrictions Enabled Users can only point and print to these servers: Disabled Enter fully qualified server names separated by semicolons Users can only point and print to machines in their forest Disabled Security Prompts: When installing drivers for a new connection: Do not show warning or elevation prompt When updating drivers for an existing connection: Do not show warning or elevation prompt This setting only applies to: Windows Vista and later
August 31st, 2009 6:17pm

Hi People,Ryan's answer is correct. There is no need to import any registry settings as this is all available to you in Group Policy. It seems that Windows 7 RTM has changed in which you need to apply the point and print settings to computer configuration as well in addition to user configuration. As Ryan explains, this was not the case in Vista.Cheers
Free Windows Admin Tool Kit Click here and download it now
September 2nd, 2009 3:48am

Ryan's answer soundsreasonable, except that I don't have the "Point and Print Restrictions"option anywhere under the Computer Configuration section of my GPO, only under User Configuration.Did some digging and found the following at http://technet.microsoft.com/en-us/library/cc753269.aspx: "To disable driver installation warning messages and elevation prompts on computers that are running Windows7 and Windows Server2008R2, in the Point and Print Restrictions dialog box, click Disabled, and then click OK. This setting disables the enhanced printer driver installation security of Windows7 and Windows Server2008R2. " However, on my Windows 7 clients, when a user logs in the first time a brandnew network printer is connected, so the driver install prompt stillshows up. Based on the GPO settings description, this only works"when a driver for an existing printer connection needs to be updated", so disabling this setting still doesn't help me.Finally, tried IL NAIRB's suggestion and created those three registry entries under Computer Configuration, Preferences, Windows Settings, Registry, andthe print driverlooks like it's installing automatically now without prompts. Going with this solution for now.
September 9th, 2009 9:23pm

Hi Trelf, You may need to update your Policy Definitions files to be that of Windows 7, i.e. update your ADMX templates on your domain to reflect Windows 7 GPO settings and hopefully then your Point and Print restrictions under computer configuration should be visible.
Free Windows Admin Tool Kit Click here and download it now
September 10th, 2009 12:59am

I can't help you on this, it appears that you have it resolved. I have a similar issue with W7RC, I upgraded from Vista Ultimate to W7RC1 and not I can't share anything from the W7RC computer! My other computers, XP and Vista can't connect via shares to the W7RC nor can they print. The printing is the main problem. I can connect to the other computers from W7RC but they can't connect to me. I even used the administrator account and password in the net use command but they can't connect to me. I have turned off the firewall, went into Local Security settings and turned off everything in there that wasn't already shut off. I can't even ping the W7RC computer from the other computers but I can ping them from my W7RC computer. It seems like all of the options in Print Manager apply to Group Policy. I am running a home network with no DC so there is no Group Policy to change. What was MS thinking?
September 10th, 2009 6:19am

I just wanted to add how to update your policy template files as I have just discovered that answer after a day of searching. The windows 7 policy files can be found at c:\windows\PolicyDefinitions on a windows 7 machine.On a domain controller go to the Sysvol\domain\policies folder. If there is a directory in there called PolicyDefinitions copy the template files from the windows 7 machine into there. If it doesn't exist you should copy the whole folder and this will create a new central policy repository.See support article here http://support.microsoft.com/default.aspx/kb/929841
Free Windows Admin Tool Kit Click here and download it now
October 1st, 2009 3:44am

Just a quick note. I had the same problem and after looking here and realizing that the settings weren't available in GP on the server, I ran the RSAT tools version of GP Managementon my Windows 7 machine and there they were. I was able to set the needed actions and the admx files were automagicly present on the server. Problem fixed.Jim Carmichael MCITP-EA
November 19th, 2009 5:22pm

As you've found, for full access to this and other Win7 related GPOs you should use the RSAT tools for Win7 or from Win 2008 R2.
Free Windows Admin Tool Kit Click here and download it now
November 19th, 2009 5:59pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics