How to download a driver but need administrator

The next step is to allow the user to install the printer drivers via GPO. Enable the policy and specify the device classes that users should be allowed to install. Click the Show button and in the appeared window add two lines with device class GUID corresponding to printers:. When you enable this policy, members of the local Users group can install a new device driver for any device that matches the specified device classes.

In Windows 10 there is another feature related to the UAC User Account Control settings, which occurs when you try to install a shared network printer. If the UAC is enabled, a message appears in which you want to specify the credentials of the Administrator. To solve this problem, you need to disable the policy Point and Print Restrictions.

In order to enable compatibility with previous versions of the Windows operating system, it is recommended to disable both policies. They are located in the following sections:.

Then you should disable this policy for Windows 10 computers, the security warnings, and elevated prompts do not appear when the user tries to install the network printer or when the printer driver is updating. You can disable Point and Print Restrictions via the registry. Use the following command:. If you want to restrict the list of print servers from which users are allowed to install print drivers without admin permissions, you need to set the Point and Print Restriction policy to Enabled.

It remains to test the policy on client computers requires restart. After rebooting and applying Group Policy settings, users will be allowed to install printer drivers without Admin permissions. Tried on a printer server to confirm, and you'll basically have to roll out the GPO to add this registry key for multiple devices. This worked for me. Rolled the registry tweak out via GPO. We will be using this fix until we change the way we install printers.

Maybe via papercut MF going forward. This has me wondering, why does Microsoft not fix the vulnerability in the Print Spooler instead of blocking users from installing print drivers?

Or is this only a temporary mitigation, and we will see an actual fix for the print spooler at a later date? But that didn't seem to totally fix the issue. Users could now click "add printer" and browse our AD and get a printer. But we Deploy printers via GPO Those were still messed up. On one printer that had an updated driver, I undeployed it. The printer still showed on the workstation, but faded out. Then I deployed the printer to the GPO of that workstation. The faded printer was still there.

I stopped the Print Spooler on the workstation. Started the spooler. Waited a minute or so, that faded printer lit up. User could print. I looked at the Printer Properties of the object, and got prompted to install Point and Print drivers. I declined. Maybe I should have agreed. But user could still print. I'm not sure if this is a solution or a work around. Definitely not a solution for users. I enabled point and print restrictions to my print server, and now end users are able to click the Update Driver button themselves without a UAC prompt.

Yes, but my users get their printers via login script, so they never see the prompt as it is done by applying the GPO before they get a desktop screen. This is a major issue for us and created mass havoc. Even if they try to install the printer manually from approved print server via point and print, they get a prompt for admin credentials to install the drivers.

The only workaround I have figured out at this point is to remove KB Since KB caused some issues with our print servers requiring admin creds on installs we applied the following that allows users to install new printers from our print server without admin creds then we applied a scheduled task right after install to change the reg edit back to requiring admin creds on non domain printer installs and keeps the printer vulnerability fix applied.

I don't know what you are talking about when you write v4 drivers. And I'm not trying to relaxe the security.. I don't want to have to gives admin credentials to hundreds of users for the printers to works on more than computers. I use packages drives on my windows servers that I use has print servers. Then begin with the step above. If you do not see a Compatibility tab in the Properties window, follow the steps below instead to always run the program as Administrator.

To disable the User Account Control prompt in Windows, follow the steps below for your version of Windows. Running programs as Administrator. Running commands as Administrator. Configuring a shortcut to always run a program as Administrator.

Once restarted, if the user still gets a prompt for credentials, restart the computer; or at least the local Printer Spooler; and try to install again. Home How-tos. Unable to install network printer without an admin password. Mac Mad This person is a verified professional. Verify your account to enable IT peers to see that you are a professional. Last Updated: Oct 19, 2 Minute Read.

Reply 1.