Microsoft KB Archive/888046

= You receive an error message when you try to install a shared network printer on a Windows Server 2003-based or Windows XP SP1-based computer =

Article ID: 888046

Article Last Modified on 10/11/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition
 * Microsoft Windows Server 2003, Web Edition
 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise x64 Edition
 * Microsoft Windows Server 2003, Datacenter x64 Edition
 * Microsoft Windows Small Business Server 2003 Premium Edition
 * Microsoft Windows Small Business Server 2003 Standard Edition
 * Microsoft Windows XP Professional
 * Microsoft Windows XP Home Edition

-



SYMPTOMS
Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 How to back up and restore the registry in Windows XP and Windows Vista

If you try to install a shared network printer, you experience symptoms if the following conditions are true:
 * You have a shared network printer that is installed on a Microsoft Windows 2000 Advanced Server-based print server.
 * You try to install the shared network printer locally on a computer that is part of a Windows domain.
 * You try to install the shared network printer locally on a computer that is running one of the following operating systems:
 * Windows XP Service Pack 1 (SP1)
 * Windows Server 2003

In this scenario, you experience the following symptoms if you try to install a shared network printer:  If you try to install the printer on a Windows XP SP1-based client by using the Add Printer Wizard or by using the printer share name from the \\ \ location, you receive the following error message:

A policy is in effect on your computer which prevents you from connecting to this print queue. Please contact your system administrator.

 If you use the Add Printer Wizard to try to install the printer on a Windows Server 2003-based client, you receive the following error message when you click Finish to complete the printer installation:

Unable to Install Printer. The printer driver is not compatible with a policy enabled on your computer that blocks Windows NT 4.0 drivers. If you want to use this driver, contact your system administrator about disabling this policy.





CAUSE
This issue occurs if the printer driver that is installed on the print server is a third-party printer driver. You cannot install a shared network printer that has a third-party printer driver locally on a Windows XP SP1-based computer if you are a regular user or a member of the Power Users group. Windows XP SP1 does not enable regular users or members of the Power Users group to install third-party drivers. In Windows XP SP1, only the following people have permission to install a third-party driver:
 * Local administrator
 * Members of the Administrators group
 * Members of the Power Users group that have the Load and unload device drivers policy permissions

If the Windows XP SP1-based computer is joined to a Microsoft Windows NT 4.0-based domain, regular users and members of the Power Users group can install third-party printer drivers to the Windows XP SP1-based client computer. You may experience issues in installing a third-party printer driver on a Windows XP SP1-based computer if the Windows XP SP1-based computer is part of a workgroup or part of a Microsoft Windows 2000-based domain.

In Windows Server 2003, you cannot install a shared network printer locally if the printer driver that is installed on the print server uses third-party kernel-mode printer drivers. A policy setting in Windows Server 2003 prevents users from installing printers that use third-party kernel-mode print drivers.

This issue may also occur if the following conditions are true:
 * DNS reverse zone lookup is not configured.
 * DNS is configured incorrectly on the print server.
 * DNS issues on the print server.



RESOLUTION
To resolve this issue, modify the Group Policy settings for the Group Policy object (GPO) that has printer policies defined for the domain users on the domain controller. To do this, use one of the following methods.

Method 1
 Configure the Load and unload device drivers policy setting for the Power Users group. To do this, follow these steps:  Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers. In the navigation pane, right-click your domain name, and then click Properties. Click the Group Policy tab, click the GPO that you want to modify, and then click Edit.</li> In Group Policy Object Editor, locate and then click the Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment folder.</li> Locate and then double-click Load and unload device drivers.</li> Click to select the Define these policy settings check box, and then click Add User or Group to add the Power Users domain group.</li> In the Add User or Group dialog box, click Browse to locate the Power Users domain group. Under Enter the object names to select, type Power Users, and then click Check Names to resolve the group name. Click OK three times.</li></ol> </li> Turn off the Disallow installation of printers using kernel-mode drivers policy. To do this, follow these steps: <ol style="list-style-type: lower-alpha;"> In the left pane, locate and then click the Computer Configuration\Administrative Templates\Printers folder.</li> Locate and then double-click Disallow installation of printers using kernel-mode drivers, click Disabled, and then click OK.</li></ol> </li> Disable the Point and Print Restrictions policy. To do this, follow these steps: <ol style="list-style-type: lower-alpha;"> In the left pane, locate and then click the User Configuration\Administrative Templates\Control Panel\Printers folder.</li> Locate and then double-click Point and Print Restrictions, click Disabled, and then click OK.</li></ol> </li> On the File menu, click Exit.</li> Click Start, click Run, type cmd.exe, and then click OK.</li> At the command prompt, type gpupdate /force, and then press ENTER.</li> Repeat steps 5 through 6 on the Windows XP SP1-based and Windows Server 2003-based client computers of the domain.</li></ol>

Method 2
<ol> On the Windows Server 2003-based print server, click Start, click Run, type Cmd, and then click OK.</li> <li>At the command prompt, type C:\, and then press ENTER.</li> <li>Type Cd\, and then press ENTER.</li> <li>Type Ipconfig /all, and then press ENTER.</li> <li> Write down the IP address of the print server computer.

Note The output for the Ipconfig /all command may resemble the following: <pre class="fixed_text">Windows IP Configuration Host Name. . . . . . . . . . . . : MachineName Primary Dns Suffix. . . . . . . : DomainName.com DNS Suffix Search List. . . . . . : DomainName.com Ethernet adapter LAN: IP Address. . . . . . . . . . . . : 169.0.0.10  Subnet Mask. . . . . . . . . . . : 255.255.252.0  DNS Servers. . . . . . . . . . . : 169.0.0.1                                      169.0.0.2                                       169.0.0.3 </li> <li>On the Windows XP-based client computer, click Start, click Run, type Cmd, and then click OK.</li> <li>At the command prompt, type C:\, and then press ENTER.</li> <li>Type Cd\, and then press ENTER.</li> <li>Type Nslookup, and then press ENTER.

Note  is the IP address that you wrote down in step 5.</li> <li>Make sure that the output of the NsLookup command contains the correct fully qualified domain name (FQDN) of the print server. If it is incorrect, you must contact the network administrator to resolve the DNS issue.</li></ol>

<div class="moreinformation_section">

MORE INFORMATION
When you disable the Point and Print Restrictions policy that is located under User Configuration\Administrative Templates\Control Panel\Printers, users can use the Point and Print functionality to select any shared printer to which they have access. For more information about this policy, see the following Microsoft Knowledge Base article:

319939 Description of the Point and Print Restrictions policy setting in Windows Server 2003 and Windows XP

How to use the registry to set the &quot;Point and Print Restrictions&quot; policy
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

The Point and Print Restrictions policy can also be set under the following registry subkey:

Value: InForest

Type: REG_DWORD

Data: 0 or 1

A setting of 0 disables this entry. A setting of 1 restricts printer access to printers in the forest.

Value: Restricted

Type: REG_DWORD

Data: 0 or 1

A setting of 0 disables this entry. A setting of 1 restricts all printers.

Value: TrustedServers

Type: REG_DWORD

Data: 0 or 1

A setting of 0 disables this entry. A setting of 1 allows printers to appear in the server list dialog box.

For more information about printer installation related issues in Windows XP and Windows Server 2003, click the following article numbers to view the articles in the Microsoft Knowledge Base:

326473 You are prompted for administrator credentials when you try to install a plug and play printer

282011 Printer driver is not compatible if a policy is enabled on your computer

319939 Description of the Point and Print Restrictions policy setting in Windows Server 2003 and Windows XP

Technical support for x64-based versions of Microsoft Windows
If your hardware came with a Microsoft Windows x64 edition already installed, your hardware manufacturer provides technical support and assistance for the Windows x64 edition. In this case, your hardware manufacturer provides support because a Windows x64 edition was included with your hardware. Your hardware manufacturer might have customized the Windows x64 edition installation by using unique components. Unique components might include specific device drivers or might include optional settings to maximize the performance of the hardware. Microsoft will provide reasonable-effort assistance if you need technical help with a Windows x64 edition. However, you might have to contact your manufacturer directly. Your manufacturer is best qualified to support the software that your manufacturer installed on the hardware. If you purchased a Windows x64 edition such as a Microsoft Windows Server 2003 x64 edition separately, contact Microsoft for technical support.

For product information about Microsoft Windows XP Professional x64 Edition, visit the following Microsoft Web site:

http://www.microsoft.com/windowsxp/64bit/default.mspx

For product information about x64-based versions of Microsoft Windows Server 2003, visit the following Microsoft Web site:

http://www.microsoft.com/windowsserver2003/64bit/x64/default.mspx

Additional query words: Winx64 Windowsx64 64bit 64-bit

Keywords: kbtshoot kb3rdparty kbwinservperf kbfileprintservices KB888046

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.