What makes these printing issues so frustrating is Microsoft's lack of clear guidance and the numerous changes that happen each month to the Windows printing feature. As these changes all resolve different vulnerable aspects of the Windows Print Spooler, they create a mess of individual fixes that Windows admins need to figure out whether they will fix their printing problems. BleepingComputer has reached out to Microsoft for official guidance on resolving all of these issues but has not heard back at this time.
The most common suggestion is to simply uninstall the KB update, which can be done using the following command in an elevated command prompt:. However, uninstalling the update will remove the security fixes for 74 vulnerabilities , including one actively exploited, making this a dangerous method.
Others have found that replacing the Win32spl. We replace this dll with version The attached batch script will copy your "good" dll file to each computer this runs on from a server location and rename the "bad" dll.
I run it as a startup script for ease". As this DLL was likely changed as part of a security update, this too will cause your computer to become less protected from possible future vulnerability exploits. Some users have also reported that removing and reinstalling their printers on the print server resolved their problem. When you remove the printer and install it again as an admin, the queues will be rebuilt, potentially allowing printing to work again.
However, workstations may need to be reconfigured to use the new printer queue, which may be a very time-consuming task for some organizations. For users who still need this feature, Microsoft introduced a hidden Group Policy that allows you to enable it again.
When set to '1', CopyFiles will be enabled again. New Windows 10 KB update breaks network printing. Posted October 16, Great application, please always update with new functions, only one problem it does not function properly on Microsoft exchange tried many times test is ok but giving an error other pop mail are ok. Privacy practices may vary based on, for example, the features you use or your age.
Learn More. Up to six family members will be able to use this app with Family Sharing enabled. App Store Preview. Screenshots iPad iPhone. Description Print directly to the widest range of network or WiFi printers, without a computer or AirPrint! However, be very careful when using a value of zero 0 because doing that makes devices vulnerable.
If you must use the registry value of 0 in your environment, we recommend using it temporarily while you adjust your environment to allow Windows devices to use the value of one 1. Default behavior: Setting this value to 1 or if the key is not defined or not present , will require administrator privilege to install any printer driver when using Point and Print. This registry key will override all Point and Print Restrictions Group Policy settings and ensures that only administrators can install printer drivers from a print server using Point and Print.
Setting the value to 0 allows non-administrators to install signed and unsigned drivers to a print server but does not override the Point and Print Group Policy settings.
Consequently, the Point and Print Restrictions Group Policy settings can override this registry key setting to prevent non-administrators from installing signed and unsigned print drivers from a print server.
Some administrators might set the value to 0 to allow non-admins to install and update drivers after adding additional restrictions, including adding a policy setting that constrains where drivers can be installed from. Important There is no combination of mitigations that is equivalent to setting RestrictDriverInstallationToAdministrators to 1.
Note Updates released July 6, or later have a default of 0 disabled until the installation of updates released August 10, or later. Updates released August 10, or later have a default of 1 enabled. Note Windows updates will not set or change the registry key.
You can set the registry key before or after installing updates released August 10, or later. To automate the addition of the RestrictDriverInstallationToAdministrators registry value, follow these steps:.
After installing updates released October 12, or later, you can also set RestrictDriverInstallationToAdministrators using a Group Policy, using the following instructions:. Set the Limits print driver installation to Administrators setting to "Enabled".
If you set RestrictDriverInstallationToAdministrators as not defined or to 1, depending on your environment, users must use one of the following methods to install printers:. Provide an administrator username and password when prompted for credentials when attempting to install a printer driver.
Note If you cannot install printer drivers, even with administrator privilege, you must disable the Only use Package Point and Print Group Policy. The following mitigations can help secure all environments, but especially if you must set RestrictDriverInstallationToAdministrators to 0.
These mitigations do not completely address the vulnerabilities in CVE Verify that Security Prompts are enabled for Point and Print as described in KB Restricting installation of new printer drivers after applying the July 6, updates.
This policy, Point and Print Restrictions , applies to Point and Print printers using a non-package-aware driver on the server. In the GPMC console tree, go to the domain or organizational unit OU that stores the user accounts for which you want to modify printer driver security settings. Right-click Point and Print Restrictions , and then click Edit. In the Point and Print Restrictions dialog, click Enabled. Select the Users can only point and print to these servers checkbox if it is not already selected.
Apps that are known to be affected include some apps from Kaspersky. Affected apps might fail to open after an update or repair has been attempted. Workaround: To mitigate this issue, you will need to uninstall the affected app, then install the latest version of the app. Resolution: This issue was resolved in KB This update should prevent the issue from occurring again, but you might need to reinstall affected apps, if they will not open.
Windows print clients might encounter the following errors when connecting to a remote printer shared on a Windows print server:. Note: The printer connection issues described in this issue are specific to print servers and are not commonly observed in devices designed for home use. Printing environments affected by this issue are more commonly found in enterprises and organizations.
Workaround : You can take steps to workaround this issue on print servers that meet the following prerequisite:. You also benefit from using client side rendering for print jobs.
0コメント