Solved

How do I disable the disallow Kernel-mode Printer drivers installation policy?

Posted on 2011-03-18
2
1,945 Views
Last Modified: 2012-06-21
I have a Windows 2008 R2 Server that will not allow kernel-mode Printer drivers to install. I have setup a group policy to disable this option and verified that the registry value is set to 0 (disabled). However, when I run gpresults /v it shows  that the Value is 0,0,0,0 but the state is enabled. I found a few different articles discussing hotfixes (981957 and 979559) and I uninstalled them. I also found 2 other articles (2160329 and 2479628) but they don't show up as being installed. It still shows that the state is enabled and I can't install my printer. Any help would be appreciated.
0
Comment
Question by:ASITech
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
2 Comments
 
LVL 13

Accepted Solution

by:
connectex earned 500 total points
ID: 35174469
Kernal mode drivers often crashed systems so Microsoft changed them to user mode starting in Windows 2000. It's all here in this article: http://blogs.technet.com/b/askperf/archive/2007/09/14/kernel-mode-print-drivers-gone-the-way-of-the-dinosaur.aspx. And as you've mentioned it's been possible to override this when needed. Through it's never really been a good idea. It seems starting with Windows 2008, it's user mode drivers only. The registry setting or GPO is ignored. This post claimed they got that fact straight from Microsoft support: http://connect.microsoft.com/WindowsServerFeedback/feedback/details/321389/gpo-disallow-installation-of-printers-using-kernel-mode-drivers-does-not-work
0
 
LVL 13

Expert Comment

by:connectex
ID: 35174581
I also found this about kernel drivers: http://technet.microsoft.com/en-us/library/cc733976(WS.10).aspx. Since 2008 R2 is only 64-bit, all kernel mode drivers will need to be signed. Signing drivers has only been done in the most recent years. So I really think Microsoft has locked this door tight. I suggest purchasing a new printer. Or you may be able to look in to using a universal print driver, if possible.
0

Featured Post

Raise the IQ of Your IT Alerts

From IT major incidents to manufacturing line slowdowns, every business process generates insights that need to reach the people required to take action. You need a platform that integrates with your business tools to create fully enabled DevOps toolchains.

You need xMatters.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question