Do you trust this printer? prompt

[FragglePete]

Hi all, struggling with this one as everything I've tried so far is not working.

 

I've recently setup a new Print Server running Server 2019 with PaperCut. All the PaperCut stuff been migrated over and after a few tweaks it's all generally working ok. All the printers were treated with the latest and greatest drivers, etc and everything generally is working. Followed Papercuts excellent guide on migrating to a new print server.

 

However, getting the 'Do you trust this printer?' prompt which lists the correct server. All the drivers used are listed in the server as 'packaged'. I've set the Computer GPO with the Point and Print Restrictions to have the name of the print server, etc. If I specify the exact server in the 'Package point and print - Approved servers'

 

If I elevate and install the driver, then the prompt never appears on the PC again as the driver is installed and makes itself available to other users. But, fresh install with a new PC and as the printers are installed by our Burconix System at login this prompt appears.

 

Google-Fu points to all that I've tried so far, and a lot about a known issue with a KB update on Server 2012R2, but I'm running 2019 so this doesn't come into play.

 

Any thoughts out there?

 

Pete

[Steve21]

Is this something that's only happened in the last few days or is it on-going? As they released a new patch that "breaks/fixes" printing again where it'll always prompt UAC on driver installs

 

"By default, non-administrator users will no longer be able to do the following using Point and Print without an elevation of privilege to administrator:

 

Install new printers using drivers on a remote computer or server

Update existing printer drivers using drivers from remote computer or server"

 

https://support.microsoft.com/en-gb/topic/kb5005652-manage-new-point-and-print-default-driver-installation-behavior-cve-2021-34481-873642bf-2634-49c5-a23b-6d8e9a302872

 

Steve

[FragglePete]

Thanks @Steve21 - interesting. Just tried it on a remote test machine (at 10:50pm at night, I need to get a life but when these things bug me I do whatever I can to stop my brain keeping me awake at night!) and by doing the tweak to the registry did install the printers without the prompt. I guess I can set that temporarily to get the drivers across the domain and then put it back on after a few days of normal running. I owe you a beer on that one.

 

Interesting the recommendations now include: Include the necessary printer drivers in the OS image. - Which may have to be an option in the future.

 

Pete

[RLR]

I read about this yesterday and checked my group policy and didn't think it would affect me. Come today where some machines have now received the update it has broken printing for us (on results day!). If we can't use point and print what's another method we can deploy printers?

[fsalazar]

Thank you @Steve21 ! after so many hours trying to find this, finally solved