[Solution]: Map printers with logon scripts in Windows 7 & Vista without UAC prompt

[SYNACK]

After a short argument with Vista about mapping printers on a certain station and some research I found a solution to allow you to map printers via VBS logon scripts without UAC getting in the way. It turns out that there is a group policy setting for Vista SP1 that suppresses the warnings and just allows the printer to map silently as it should. You will need 2008 server or RSAT installed on a Vista SP1 client to set it up.

User Configuration -> Policies -> Administrative Templates -> Control Panel -> Printers : Point and Print Restrictions
Setting: Enabled

In its Config Tab:
Do not specify any servers to restrict Point and Print to so it will continue to work for any server without specifying every one

Security Prompts:
When Installing drivers for a new connection:
-Do not show warning or elevation prompt
-Show warning and elevation prompt

When updating drivers for an existing connection:
-Do not show warning or elevation prompt
-Show warning and elevation prompt
-Show warning only

EDIT: Since Windows 7 and Vista service pack 2 a new policy has been implemented as below which also needs to be set to work with these newer clients. You need to be using Windows 7 RSAT or have updated the ADMX files in your domain central store to see these options.

Computer Configuration -> Policies -> Administrative Templates -> Printers : Point and Print Restrictions
Setting: Enabled

In its Config Tab:
Do not specify any servers to restrict Point and Print to so it will continue to work for any server without specifying every one

Security Prompts:
When Installing drivers for a new connection:
-Do not show warning or elevation prompt
-Show warning and elevation prompt

When updating drivers for an existing connection:
-Do not show warning or elevation prompt
-Show warning and elevation prompt
-Show warning only

Problems solved, simple solution too. As it happens someone else had actually posted this solution here earlier but I had not noticed it and only found it when looking for any duplicate posts of the same information. The first mention of this method on this site is here.

[EvLPhenom]

Huge thanks for this. Been trying to fix this issue for the last day...

[speckytecky]

Megga thanks Synac - this one has been plaguing me for yonks as well.

[Michael]

It's not just scripts when these settings should be enabled, but deploying via GPO too.

The printer will deploy without these settings enabled, however on many occasions the full driver isn't installed, only a basic driver (if Vista or 7 has one). Otherwise you're forced to open Devices and Printers, right click the printer and select 'Install driver'.