I've been having a rough time trying to deploy our Canon copiers through Group Policy Objects (GPO). Last week, it was working fine for a security group using the Canon Generic Plus PCL6 Driver, but today I hit a snag. I was trying to add another copier and got a "this operation requires elevation" error in the event viewer. After that, the other printers lost their drivers, and now they can't install the necessary ones anymore. I've searched for V4 Canon drivers but couldn't find anything. I've also looked into enabling/disabling Point and Print restrictions and even tried a different driver from Canon. Can anyone help me figure out what's going wrong with my GPO printer deployments? I feel like I'm battling the horror of PrintNightmare for real!
1 Answer
To get GPO deployment to work, you need to use Type 3 drivers for client computers. Set your GPOs properly under Admin Templates for Printers. Make sure to disable 'Allow Print Spooler to accept client connections', and set 'Points and Print Restrictions' to allow specific FQDNs for your print servers. Don't forget to reboot or restart the spooler after applying the GPOs. It can get tedious, but this should get non-admin users able to install printers and drivers without any UAC prompts.
Just a heads up, Microsoft recommends against using point and print due to vulnerabilities, so consider that when implementing these changes!