[Samba] Point-and-Print driver installation asks for confirmation on current Windows

L.P.H. van Belle
2016-09-15T08:42:22Z

>> change the .inf by yourself

When you do that, you get the message that the driver isnt signed.



Ow.. And.. wait .. i'll get that beer..   ;-) ( at least working on it. )



Only tested it while entering the link : \\server.domain.tld\printershare

Still testing the deployment, but im buzy also with lots of other things.

So go testing is slow here.. please do test and report back here.



At least i can install the printer driver as user again.

Try the following.



Goto the policy.:

Computer Configuration, Administrative Templates, System, and then Driver
Installation.

Enable it, Klik below on Show.

Add this GUID:



{4d36e979-e325-11ce-bfc1-08002be10318}

( GUID found here :
https://msdn.microsoft.com/en-us/library/windows/hardware/ff553426(v=vs.85).aspx
)



Reboot you computer 2x !  ( first to apply the setting, second to make use of
it. )



Not the best solution in my optionion but the best i could find out for now.

We need better drivers from the printer suppliers, thats the only good fix.





Greetz.



Louis





> -----Oorspronkelijk bericht-----

> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Olivier BILHAUT

> via samba

> Verzonden: maandag 12 september 2016 10:14

> Aan: samba at lists.samba.org

> Onderwerp: Re: [Samba] Point-and-Print driver installation asks for

> confirmation on current Windows

>

>

>

> Hi all.

>

> I have read carefully all your posts and I am glad to see

> that some of you workaround this new MS surprise...

>

> To solve the

> problem, I understand that :

>

>     * if you use the "AD way of deploying

> printers", the workaround is to use the "Computer

> ConfigurationPoliciesAdministrative TemplatesPrintersOverride Print

> Driver Compatibility Execution Setting Reported By Print Driver"

>     * You

> can change the printers drivers for new drivers which handle "driver

> isolation" (or change the .inf by yourself)

>     * On windows 7 sp1, you

> can also remove the KB3170435, we actually work on a script to do that

> if required

>

> But when you are on this situation :

>

>     * Using a

> home-made script for deploying printer connections (not the

> administrative templates)

>     * Using old drivers who do NOT and would

> NEVER handle "driver isolation"

>     * Changing the .inf of all the drivers

> is NOT an option (constructors have not yet released such officials

> drivers)

>

> We cannot find any solution for this situation except removing

> the KB itself.

>

> Note that the "point-and-print" GPO option

> (Computer/User) do not solve the problem, even using the FQDN name of

> the printer server. Particulary for the UPDATE of the printer driver. We

> always get the security prompt, forever !

>

> If some of them are in the

> same situation and manage to find a workaround, I pay a beer :)

>

> For

> now, we are about to remove the KB using a script.

>

> Cheers and thanks

> to all !

> --

>

> OB

> --

> To unsubscribe from this list go to the following URL and read the

> instructions:  https://lists.samba.org/mailman/options/samba