Policy
Point and Print Restrictions
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista
This policy setting controls the client Point and Print behavior, including the security prompts for Windows Vista computers. The policy setting applies only to non-Print Administrator clients, and only to computers that are members of a domain. If you enable this policy setting: -Windows XP and later clients will only download print driver components from a list of explicitly named servers. If a compatible print driver is available on the client, a printer connection will be made. If a compatible print driver is not available on the client, no connection will be made. -You can configure Windows Vista clients so that security warnings and elevated command prompts do not appear when users Point and Print, or when printer connection drivers need to be updated. If you do not configure this policy setting: -Windows Vista client computers can point and print to any server. -Windows Vista computers will show a warning and an elevated command prompt when users create a printer connection to any server using Point and Print. -Windows Vista computers will show a warning and an elevated command prompt when an existing printer connection driver needs to be updated. -Windows Server 2003 and Windows XP client computers can create a printer connection to any server in their forest using Point and Print. If you disable this policy setting: -Windows Vista client computers can create a printer connection to any server using Point and Print. -Windows Vista computers will not show a warning or an elevated command prompt when users create a printer connection to any server using Point and Print. -Windows Vista computers will not show a warning or an elevated command prompt when an existing printer connection driver needs to be updated. -Windows Server 2003 and Windows XP client computers can create a printer connection to any server using Point and Print. -The "Users can only point and print to computers in their forest" setting applies only to Windows Server 2003 and Windows XP SP1 (and later service packs).
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKLM\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\Restricted | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
Enter fully qualified server names separated by semicolons ID PointAndPrint_TrustedServers_Edit | text | HKLM\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\ServerList Type REG_SZ | None |
When installing drivers for a new connection: ID PointAndPrint_NoWarningNoElevationOnInstall_Enum | enum | HKLM\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\NoWarningNoElevationOnInstall Type REG_DWORD | Options: Show warning and elevation prompt (0), Do not show warning or elevation prompt (1) |
When updating drivers for an existing connection: ID PointAndPrint_NoWarningNoElevationOnUpdate_Enum | enum | HKLM\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\UpdatePromptSettings Type REG_DWORD | Options: Show warning and elevation prompt (0), Show warning only (1), Do not show warning or elevation prompt (2) |
Users can only point and print to these servers: ID PointAndPrint_TrustedServers_Chk | boolean | HKLM\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\TrustedServers Type REG_DWORD | Options: true (1), false (0) True: Set value = 1 · False: Set value = 0 |
Users can only point and print to machines in their forest ID PointAndPrint_TrustedForest_Chk | boolean | HKLM\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint\InForest Type REG_DWORD | Options: true (1), false (0) True: Set value = 1 · False: Set value = 0 |
Other policies in this category
Explore related policies at the same level.
- ComputerActivate Internet printingWindows 2000 only
- ComputerAdd Printer wizard - Network scan page (Managed network)At least Windows Vista
- ComputerAdd Printer wizard - Network scan page (Unmanaged network)At least Windows Vista
- ComputerAllow job name in event logsAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerAllow Print Spooler to accept client connectionsAt least Windows Server 2003
- ComputerAllow printers to be publishedAt least Windows 2000
- ComputerAllow pruning of published printersAt least Windows 2000
- ComputerAlways rasterize content to be printed using a software rasterizerAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerAlways render print jobs on the serverAt least Windows Vista
- ComputerAlways send job page count information for IPP printersAt least Windows Server 2016, Windows 10
- ComputerAutomatically publish new printers in Active DirectoryWindows Server 2003, Windows XP, and Windows 2000 only
- ComputerChange Microsoft XPS Document Writer (MXDW) default output format to the legacy Microsoft XPS format (*.xps)At least Windows Server 2012, Windows 8 or Windows RT