Microsoft marks latest Windows printing issue as resolved (KB5005033)

Microsoft acknowledged another printing related issue on Windows. After installing the August 2021 patches for Windows, e.g. KB5005033 or KB5005031, some users noticed that printing was causing issues on said devices.

According to Microsoft's description, affected printers used Point and Print in some environments. These would throw the error message "Do you trust this printer" on any print job started from the affected device. Users were prompted to enter administrative credentials every time an application attempted to print or a print client connected to the print server.

Microsoft's analysis of the issue concluded that the issue is caused by a filename conflict.

This is caused by a print driver on the print client and the print server using the same filename, but the server has a newer version of the file. When the print client connects to the print server, it finds a newer driver file and is prompted to update the drivers on the print client, but the file in the package it is offered for installation does not include the later file version.

Microsoft suggests that affected customers install the latest drivers on all printing devices to resolve the issue, and to make sure, "where possible", to use the same print driver version on print clients and print servers.

The issue affects all major versions of Windows that are supported by Microsoft.

Client: Windows 10, version 21H1; Windows 10, version 20H2; Windows 10, version 2004; Windows 10, version 1909; Windows 10, version 1809; Windows 10 Enterprise LTSC 2019; Windows 10 Enterprise LTSC 2016; Windows 10, version 1607; Windows 10 Enterprise 2015 LTSB; Windows 8.1; Windows 7 SP1

Server: Windows Server 2022; Windows Server, version 20H2; Windows Server, version 2004; Windows Server, version 1909; Windows Server, version 1809; Windows Server 2019; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012; Windows Server 2008 R2 SP1; Windows Server 2008 SP2

Microsoft published a support page, KB5005652, which provides additional information on the issue.

The company changed how print drivers are installed or update as a consequence. Non-administrators can't install or upgrade print drivers using drivers from remote computers or servers without elevation of privilege to administrator.

Microsoft created a new Registry key to restore the old behavior.

• Registry location: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint
• Dword (32-bit) Value name: RestrictDriverInstallationToAdministrators
• Value data:
  • The default value is 1; this requires administrative privileges to install or update print drivers when using Point and Print.
  • A value of 0 allows non-administrators to install drivers when using Point and Print.

Windows users in Point and Print environments have four options to install print drivers or updates of print drivers according to Microsoft by default:

• Provide an administrator username and password when prompted for credentials when attempting to install a printer driver.
• Include the necessary printer drivers in the OS image.
• Use Microsoft System Center, Microsoft Endpoint Configuration Manager, or an equivalent tool to remotely install printer drivers.
• Temporarily set RestrictDriverInstallationToAdministrators to 0 to install printer drivers.

Closing Words

Microsoft released several printing updates this year alone, some to address the PrintNightmare vulnerability, others to address non-security issues, such as printer bluescreen issues.

Most home devices should not be affected by the new issue, but another printing related issue exists already after installation of the September 2021 Patch Day updates.

Microsoft marks latest Windows printing issue as resolved (KB5005033)