users cannot map server printer - software restriction policy

[mcheung0]

Hello, users are getting this error when logging on with a printer mapping vbs script:

 

"Windows cannot open this program because it has been prevented by a software restriction policy

Code: 800704EC"

 

We haven't set any software restriction policies so it's odd - I have been into the OU's security settings to disable - 'Devices:prevent users from installing printer drivers' by drilling down to

 

(computer OU)/ Computer configuration/ Windows Settings/ Security Settings/ Local Policies/ Security Options

 

using policy object editor.

 

We've forced gpupdate on machines/ rebooted /all the usual but no success

 

Is there anything we're missing?

 

Thanks

Michael

Software Restriction policy Error_edit.bmp

[Michael]

Is there any reason you haven't explored deploying with GPO? You can bypass lots of errors common with scripts.

[mcheung0]

Thanks for the thoughts Michael.

 

We're using logon scripts so that users can map specific printers depending on their location - using GPO would take away the 'dynamic' aspect of the situation - in other words - we only want users to be able to print to the printer nearest them rather than mapping all the printers in school and subsequently printing to the furthest away printer(!)

 

A little extra information: logging on to machines as administrator and running the script locally succeeds and then users of that machine are able to map successfully from then on - that would indicate that the administrator is altering something in group policy specifically to that machine, right?

[Michael]

You can deploy printers per user or computer, or a combination of both, so you can setup printers based on a location basis with GPOs. Adding/removing printers as well as upgrading drivers is a breeze compared to script methods.

 

The script could be modifying something in the registry possibly which would explain the permission type errors.