Windows 2016 Remote Desktop Session host allows users to install printer drivers regardless of security setting.

D

Dave-Struck-North

Background: We've recently setup a new Remote Desktop collection of 4x Windows 2016 Session hosts and setup security so that the "Devices: Prevent users from installing printer drivers = Enabled"
UAC is enabled on the servers and functioning as expected for other software installs

Issue: Regular domain users that logon to the server are able to install drivers via the "Add a printer or scanner" wizard found in the Windows Settings application
From what we have read online from the MS site and forums this should not be the case, the users should not be able to install printer drivers but when they go through the wizard they are able to connect to shared printers from any print server and the driver is installed as part of that connection.

We've found a few other forum feeds that report the same issue in Windows 2012 but with no potential resolution.

Any help with this would be greatly appreciated


You can run, but you cannot hide, It will find you!

Continue reading...
 
Back
Top Bottom