Block the installation of kernel-mode printer drivers

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To block the installation of kernel-mode printer drivers

Open Group Policy.
Under Local Computer Policy, double-click Computer Configuration.
Double-click Administrative Templates, and then double-click Printers.
Right-click Disallow installation of printers using kernel mode drivers, and then click properties.
On the Setting tab, click Enabled, and then click OK.

Important

This policy does not affect existing kernel-mode printer drivers. Kernel-mode printer drivers that were installed before you set this policy will not be disabled or removed. You can upgrade existing non-kernel-mode printer drivers whether you set this policy or not.

Notes

To open Group Policy so that you can edit the local Group Policy object, click Start, click Run, type gpedit.msc, and then press ENTER.
In Windows Server 2003, Standard Edition and Windows Server 2003, Enterprise Edition, installation of kernel-mode drivers is blocked by default. In Windows XP Professional, installation of kernel-mode drivers is not blocked by default.
You must click Enabled to block the installation of kernel-mode printer drivers. Clicking Not Configured or Disabled allows kernel-mode printer drivers to be installed.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.