Computer step by step
 Make your Pc better
Description:  

This policy setting controls the client Point and Print behavior, including the security prompts for Windows
Vista computers. The policy setting applies only to non-Print Administrator clients, and only to computers that
are members of a domain.

When the policy setting is enabled:
-Windows XP and later clients will only download print driver components from a list of explicitly named
 servers. If a compatible print driver is available on the client, a printer connection will be made. If a
 compatible print driver is not available on the client, no connection will be made.
-You can configure Windows Vista clients so that security warnings and elevated command prompts do not
 appear when users Point and Print, or when printer connection drivers need to be updated.

When the policy setting is not configured:
-Windows Vista client computers can point and print to any server.
-Windows Vista computers will show a warning and an elevated command prompt when users create a
 printer connection to any server using Point and Print.
-Windows Vista computers will show a warning and an elevated command prompt when an existing printer
 connection driver needs to be updated.
-Windows Server 2003 and Windows XP client computers can create a printer connection to any server in
 their forest using Point and Print.

When the policy setting is disabled:
-Windows Vista client computers can create a printer connection to any server using Point and Print.
-Windows Vista computers will not show a warning or an elevated command prompt when users create a
 printer connection to any server using Point and Print.
-Windows Vista computers will not show a warning or an elevated command prompt when an existing printer
 connection driver needs to be updated.
-Windows Server 2003 and Windows XP client computers can create a printer connection to any server using
 Point and Print.
-The "Users can only point and print to computers in their forest" setting applies only to Windows Server
 2003 and Windows XP SP1 (and later service packs).

Supported on: Supported Windows XP SP1 through Windows Server 2008 RTM
Point and Print Restrictions
Description Gpedit Regedit CMD Back VBScript PowerShell Script
Gpedit:   

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
Type gpedit.msc and press Enter
In the Group Policy window please navigate to User Configuration -> Administrative Templates ->
Control Panel -> Printers and open Point and Print Restrictions.
Not Configured -> is the Default state
Enabled -> apply this GPO
Disabled -> this GPO will not be applied

To finish press ok button and close Group Policy window.
Type regedit and press ok
Please confirm User Account Control pop-up
Microsoft official disclaimer

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by
using another method. These problems might require that you reinstall the operating system. Microsoft
cannot guarantee that these problems can be solved. Modify the registry at your own risk.

Note: This registry key is created by Group Policy when this GPO is Enable or Disable. The GPO Default state
is Not Configured -> this registry entry is not present.

Please navigate to HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows NT\Printers
\PointAndPrint
and locate:
Restricted registry key
TrustedServers registry key
ServerList registry key
InForest registry key
NoWarningNoElevationOnInstall registry key
UpdatePromptSettings registry key
Regedit:          

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
   
   
Double click on Restricted and edit the value:

To Enable:
Change the data value with:
Restricted = 1
Users can only point and print to these server
checked
TrustedServers = 1
unchecked
TrustedServers = 0
Enter fully qualified server names separated by semicolons
ServerList = 10.0.0.10
Users can only point and print to machines in their forest
checked
InForest = 1
unchecked
InForest = 0
When installing drivers for a new connection:
Do not show warning or elevation prompt
NoWarningNoElevationOnInstall = 1
Show warning and elevation prompt
NoWarningNoElevationOnInstall = 0
When updating drivers for an existing connection:
Show warning and elevation prompt
UpdatePromptSettings = 0
Show warning only
UpdatePromptSettings = 1
Do not show warning or elevation prompt
UpdatePromptSettings = 2

To Disable:
Change the data value with:
Restricted = 0
InForest = 0
TrustedServers = 0

To finish press ok button and close Registry Editor window

Note: Manual editing of this registry key will not be reflected in Group Policy. If you modify this GPO from
Group Policy this registry key will be rewritten.
Type cmd, right click on cmd icon under the Programs and click on Run as administrator
Please confirm User Account Control pop-up
Please select, right and copy a registry key from below, then right click on command prompt window
, select Paste and press Enter

Enabled:
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v Restricted /t REG_DWORD /d 1 /f
Users can only point and print to these server
checked
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v TrustedServers /t REG_DWORD /d 1 /f
unchecked
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v TrustedServers /t REG_DWORD /d 0 /f
Enter fully qualified server names separated by semicolons
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v ServerList /t REG_SZ /d 10.0.0.10 /f
Users can only point and print to machines in their forest
checked
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v InForest /t REG_DWORD /d 1 /f
unchecked
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v InForest /t REG_DWORD /d 0 /f
When installing drivers for a new connection:
Do not show warning or elevation prompt
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v NoWarningNoElevationOnInstall /t REG_DWORD /d 1 /f
Show warning and elevation prompt
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v NoWarningNoElevationOnInstall /t REG_DWORD /d 0 /f
When updating drivers for an existing connection:
Show warning and elevation prompt
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v UpdatePromptSettings /t REG_DWORD /d 0 /f
Show warning only
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v UpdatePromptSettings /t REG_DWORD /d 1 /f
Do not show warning or elevation prompt
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v UpdatePromptSettings /t REG_DWORD /d 2 /f

Disabled:
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v Restricted /t REG_DWORD /d 0 /f
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v InForest /t REG_DWORD /d 0 /f
REG add "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v TrustedServers /t REG_DWORD /d 0 /f
Not Configured:
REG DELETE "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v Restricted /f
REG DELETE "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v TrustedServers /f
REG DELETE "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v ServerList /f
REG DELETE "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v InForest /f
REG DELETE "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v NoWarningNoElevationOnInstall /f
REG DELETE "HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v UpdatePromptSettings /f

Note: Manual editing of this registry key will not be reflected in Group Policy. If you modify this GPO from
Group Policy this registry key will be rewritten.
CMD:          

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
   
VBScript:          

Const HKEY_CURRENT_USER = &H80000001
strComputer = "."
Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & _
strComputer & "\root\default:StdRegProv")

strKeyPath = "Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint"
oReg.CreateKey HKEY_CURRENT_USER,strKeyPath
strValueName1 = "Restricted"
strValueName2 = "TrustedServers"
strValueName3 = "ServerList"
strValueName4 = "InForest"
strValueName5 = "NoWarningNoElevationOnInstall"
strValueName6 = "UpdatePromptSettings"

'Enabled
dwValue1 = 0
dwValue2 = 1
dwValue3 = 2
strValue = "10.0.0.10"
oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName1,dwValue1
'Users can only point and print to these server
'checked
oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName1,dwValue2
'unchecked
'oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName1,dwValue1
'Enter fully qualified server names separated by semicolons
oReg.SetStringValue HKEY_CURRENT_USER,strKeyPath,strValueName3,strValue
'Users can only point and print to machines in their forest
'checked
oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName4,dwValue2
'unchecked
'oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName4,dwValue1
'When installing drivers for a new connection:
'Do not show warning or elevation prompt
oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName5,dwValue2
'Show warning and elevation prompt
'oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName5,dwValue1
'When updating drivers for an existing connection:
'Show warning and elevation prompt
oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName6,dwValue1
'Show warning only
'oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName6,dwValue2
'Do not show warning or elevation prompt
'oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName6,dwValue3

'Disabled
'dwValue1 = 0
'oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName1,dwValue1
'oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName2,dwValue1
'oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName4,dwValue1

'Not Configured
'oReg.DeleteValue HKEY_CURRENT_USER,strKeyPath,strValueName1
'oReg.DeleteValue HKEY_CURRENT_USER,strKeyPath,strValueName2
'oReg.DeleteValue HKEY_CURRENT_USER,strKeyPath,strValueName3
'oReg.DeleteValue HKEY_CURRENT_USER,strKeyPath,strValueName4
'oReg.DeleteValue HKEY_CURRENT_USER,strKeyPath,strValueName5
'oReg.DeleteValue HKEY_CURRENT_USER,strKeyPath,strValueName6
   
PowerShell Script :          

Enabled\Disabled

$RegKey = "HKCU:\Software\Policies\Microsoft\Windows NT"
If(Test-Path ($RegKey + "\Printers"))
{
 $RegKey = "HKCU:\Software\Policies\Microsoft\Windows NT\Printers"
 If(Test-Path ($RegKey + "\PointAndPrint"))
 {
   $RegKey = "HKCU:\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint"
    ##Enabled
   New-ItemProperty -path $RegKey -name Restricted -value 1 -PropertyType DWord -Force
   ##Users can only point and print to these server
   ##checked
   New-ItemProperty -path $RegKey -name TrustedServers -value 1 -PropertyType DWord -Force
   ##unchecked
   ##New-ItemProperty -path $RegKey -name TrustedServers -value 0 -PropertyType DWord -Force
   ##Enter fully qualified server names separated by semicolons
   New-ItemProperty -path $RegKey -name ServerList -value 10.0.0.10 -PropertyType String -Force
   ##Users can only point and print to machines in their forest
   ##checked
   New-ItemProperty -path $RegKey -name InForest -value 1 -PropertyType DWord -Force
   ##unchecked
   ##New-ItemProperty -path $RegKey -name InForest -value 0 -PropertyType DWord -Force
   ##When installing drivers for a new connection:
   ##Do not show warning or elevation prompt
   New-ItemProperty -path $RegKey -name NoWarningNoElevationOnInstall -value 1 -PropertyType DWord -Force
   ##Show warning and elevation prompt
   ##New-ItemProperty -path $RegKey -name NoWarningNoElevationOnInstall -value 0 -PropertyType DWord -Force
   ##When updating drivers for an existing connection:
   ##Show warning and elevation prompt
   New-ItemProperty -path $RegKey -name UpdatePromptSettings -value 0 -PropertyType DWord -Force
   ##Show warning only
   ##New-ItemProperty -path $RegKey -name UpdatePromptSettings -value 1 -PropertyType DWord -Force
   ##Do not show warning or elevation prompt
   ##New-ItemProperty -path $RegKey -name UpdatePromptSettings -value 2 -PropertyType DWord -Force
    ##Disabled
    ##New-ItemProperty -path $RegKey -name Restricted -value 0 -PropertyType DWord -Force
    ##New-ItemProperty -path $RegKey -name InForest -value 0 -PropertyType DWord -Force
    ##New-ItemProperty -path $RegKey -name TrustedServers -value 0 -PropertyType DWord -Force
 }
 else
 {
   New-Item -path $RegKey -name PointAndPrint
   $RegKey = "HKCU:\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint"
    ##Enabled
   New-ItemProperty -path $RegKey -name Restricted -value 1 -PropertyType DWord
   ##Users can only point and print to these server
   ##checked
   New-ItemProperty -path $RegKey -name TrustedServers -value 1 -PropertyType DWord
   ##unchecked
   ##New-ItemProperty -path $RegKey -name TrustedServers -value 0 -PropertyType DWord
   ##Enter fully qualified server names separated by semicolons
   New-ItemProperty -path $RegKey -name ServerList -value 10.0.0.10 -PropertyType String
   ##Users can only point and print to machines in their forest
   ##checked
   New-ItemProperty -path $RegKey -name InForest -value 1 -PropertyType DWord
   ##unchecked
   ##New-ItemProperty -path $RegKey -name InForest -value 0 -PropertyType DWord
   ##When installing drivers for a new connection:
   ##Do not show warning or elevation prompt
   New-ItemProperty -path $RegKey -name NoWarningNoElevationOnInstall -value 1 -PropertyType DWord
   ##Show warning and elevation prompt
   ##New-ItemProperty -path $RegKey -name NoWarningNoElevationOnInstall -value 0 -PropertyType DWord
   ##When updating drivers for an existing connection:
   ##Show warning and elevation prompt
   New-ItemProperty -path $RegKey -name UpdatePromptSettings -value 0 -PropertyType DWord
   ##Show warning only
   ##New-ItemProperty -path $RegKey -name UpdatePromptSettings -value 1 -PropertyType DWord
   ##Do not show warning or elevation prompt
   ##New-ItemProperty -path $RegKey -name UpdatePromptSettings -value 2 -PropertyType DWord
    ##Disabled
    ##New-ItemProperty -path $RegKey -name Restricted -value 0 -PropertyType DWord
    ##New-ItemProperty -path $RegKey -name InForest -value 0 -PropertyType DWord
    ##New-ItemProperty -path $RegKey -name TrustedServers -value 0 -PropertyType DWord
 }
}
else
{
 New-Item -path $RegKey -name Printers
 $RegKey = "HKCU:\Software\Policies\Microsoft\Windows NT\Printers"
 New-Item -path $RegKey -name PackagePointAndPrint
 $RegKey = "HKCU:\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint"
  ##Enabled
 New-ItemProperty -path $RegKey -name Restricted -value 1 -PropertyType DWord
 ##Users can only point and print to these server
 ##checked
 New-ItemProperty -path $RegKey -name TrustedServers -value 1 -PropertyType DWord
 ##unchecked
 ##New-ItemProperty -path $RegKey -name TrustedServers -value 0 -PropertyType DWord
 ##Enter fully qualified server names separated by semicolons
 New-ItemProperty -path $RegKey -name ServerList -value 10.0.0.10 -PropertyType String
 ##Users can only point and print to machines in their forest
 ##checked
 New-ItemProperty -path $RegKey -name InForest -value 1 -PropertyType DWord
 ##unchecked
 ##New-ItemProperty -path $RegKey -name InForest -value 0 -PropertyType DWord
 ##When installing drivers for a new connection:
 ##Do not show warning or elevation prompt
 New-ItemProperty -path $RegKey -name NoWarningNoElevationOnInstall -value 1 -PropertyType DWord
 ##Show warning and elevation prompt
 ##New-ItemProperty -path $RegKey -name NoWarningNoElevationOnInstall -value 0 -PropertyType DWord
 ##When updating drivers for an existing connection:
 ##Show warning and elevation prompt
 New-ItemProperty -path $RegKey -name UpdatePromptSettings -value 0 -PropertyType DWord
 ##Show warning only
 ##New-ItemProperty -path $RegKey -name UpdatePromptSettings -value 1 -PropertyType DWord
 ##Do not show warning or elevation prompt
 ##New-ItemProperty -path $RegKey -name UpdatePromptSettings -value 2 -PropertyType DWord
  ##Disabled
  ##New-ItemProperty -path $RegKey -name Restricted -value 0 -PropertyType DWord
  ##New-ItemProperty -path $RegKey -name InForest -value 0 -PropertyType DWord
  ##New-ItemProperty -path $RegKey -name TrustedServers -value 0 -PropertyType DWord
}

Not Configured

$RegKey = "HKCU:\Software\Policies\Microsoft\Windows NT"
Remove-ItemProperty -Path($RegKey + "\Printers\PointAndPrint") -name Restricted
Remove-ItemProperty -Path($RegKey + "\Printers\PointAndPrint") -name TrustedServers
Remove-ItemProperty -Path($RegKey + "\Printers\PointAndPrint") -name ServerList
Remove-ItemProperty -Path($RegKey + "\Printers\PointAndPrint") -name InForest
Remove-ItemProperty -Path($RegKey + "\Printers\PointAndPrint") -name NoWarningNoElevationOnInstall
Remove-ItemProperty -Path($RegKey + "\Printers\PointAndPrint") -name UpdatePromptSettings
If( (Get-Item -Path($RegKey + "\Printers\PointAndPrint")).ValueCount -eq 0 -and (Get-Item -Path($RegKey + "\Printers\PointAndPrint")).SubKeyCount -eq 0)
{
 Remove-Item -Path($RegKey + "\Printers\PointAndPrint")
 If( (Get-Item -Path($RegKey + "\Printers")).ValueCount -eq 0 -and (Get-Item -Path($RegKey + "\Printers")).SubKeyCount -eq 0)
 {
   Remove-Item -Path($RegKey + "\Printers")
 }   
}
Up Back
   
   
Result
Need test pictures