A Standard User is prompted for administrative credentials (Security Prompt) when installing a network printer even after the Point and Print Restrictions policies are applied. This may occur on Windows 7, Windows Server 2008 R2 and versions of Windows Vista and Windows Server 2008 that have Service Pack 2 installed.

Windows 7, Windows Server 2008 R2 and Service Pack 2 release of Windows Vista and Windows Server 2008 ignore the Point and Print Restrictions policy when implemented under the user policy context.

The Point and Print Restrictions policies were previously implemented under User Configuration\Policies\Administrative Templates\Control Panel\Printers, but are implemented under Computer Configuration -> Policies -> Administrative Templates -> Printers : Point and Print Restrictions in the operating systems listed above.

To have a consistent experience, it is recommend that you set the policy in both locations if dealing with mixed-level clients.

NOTE: The following procedure assumes that you are using the version of the Group Policy Management Console (GPMC) that is included with Windows Server 2008 R2 or you need to be using Windows 7 RSAT or have updated the ADMX files in your domain central store to see these options. To install GPMC on Windows Server 2008 R2, use the Add Features Wizard of Server Manager.

To modify the Point and Print Restrictions setting 

1. Open the Group Policy Management Console (GPMC).
2. In the GPMC console tree, navigate to the domain or organizational unit (OU) that stores the user accounts for which you want to modify printer driver security settings.
3. Right-click the appropriate domain or OU, click Create a GPO in this domain, and Link it here, type a name for the new GPO, and then click OK.
4. Right-click the GPO that you created and then click Edit.
5. In the Group Policy Management Editor window, click Computer Configuration, click Policies, click Administrative Templates, and then click Printers.
6. Right-click Point and Print Restrictions, and then click Edit. 


To permit users to connect only to specific print servers that you trust 

1. In the Point and Print Restrictions dialog box, click Enabled.

Computer Configuration -> Policies -> Administrative Templates -> Printers : Point and Print Restrictions
Setting: Enabled

2. Select the Users can only point and print to these servers check box if it is not already selected.
3. In the text box, type the fully qualified server names to which you want to allow users to connect. Separate each name with a semi-colon.
4. In the When installing drivers for a new connection box, choose Do not show warning or elevation prompt.
5. In the When updating drivers for an existing connection box, choose Show warning only.
6. Click OK.

NOTE: Alternatively you can disable the driver installation warning messages and elevation prompts on computers that are running Windows 7, Windows Server 2008 R2 and Service Pack 2 release of Windows Vista and Windows Server 2008 by completely disabling the Point and Print Restrictions Policy. This setting disables the enhanced printer driver installation security of Windows 7 and Windows Server 2008 R2:

Computer Configuration -> Policies -> Administrative Templates -> Printers : Point and Print Restrictions
Setting: Disable

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use (http://go.microsoft.com/fwlink/?LinkId=151500) for other considerations.