topic Re: Package-Aware Print Drivers? in Office Printers

Package-Aware Print Drivers?

itangir — Fri, 29 Jul 2016 19:03:45 GMT

So the recent print server vulnerability caused Microsoft to patch up Point and Print. Now package-unaware V3 drivers do not play nice with Group Policy.

A lot of the network printers on our print server already have packaged drivers and aren't affected. All of our Canon drivers do not, however, and this means we need to go to each user and put in administrator credentials in order for them to make a (new) printer connection to our Canon imageRunners...

Even the latest UFRII drivers for our models appear to still be unpackaged...

Does Canon offer package-aware V3 drivers? If not, do they plan to offer them? We'd like to know what Canon's doing about this so we can take the appropriate steps.

Re: Package-Aware Print Drivers?

jrhoffman75 — Fri, 29 Jul 2016 21:33:21 GMT

This is an end-user supported forum. You are best served by calling 1-800-OK-CANON.

Re: Package-Aware Print Drivers?

OCDGeek — Sat, 30 Jul 2016 06:30:32 GMT

Same issue here, We have lexmark's and Canon's we pushed the win updates for July on the 21st, Came in Monday morning to find all the canon's were gone. Manualy mapped them on about 2 dozen just to relize we had the GP on replace, it deleted all of them that we bandaid'd. About to rollback the windows updates that were fixing the 20 year old bug. Couldn't beleive lexmark drivers worked over Canon's. SMH!

Updates to uninstall:

Windows 10 - 1511

KB3172985

Windows 10

KB3163912

Windows 8.1 and older

KB3170455

Re: Package-Aware Print Drivers?

Ink — Tue, 09 Aug 2016 10:51:03 GMT

This is a huge issue for many. Canon need to urgently release packaged drivers for Windows servers. They appear to be the only vendor that does not.

Re: Package-Aware Print Drivers?

LJS576 — Mon, 15 Aug 2016 13:02:12 GMT

I'm a technician working on Canon products. Canon is aware of the problem and is working on a fix. Unfortunately, it may be end of September before the fix is ready.

As usual, MS tried to fix something and broke something else in the process.

Re: Package-Aware Print Drivers?

tolvajp — Tue, 16 Aug 2016 09:20:58 GMT

In other words Microsoft told, please make packaged drivers since vista, and Canon did not made this.,

Anyways. If you set the right GPO at Computer settings/administrative templates/printers/point and print restrictions the issue seems solved.

Re: Package-Aware Print Drivers?

tolvajp — Tue, 16 Aug 2016 09:36:20 GMT

It seems, if you set this GPO right, the problem will be solved. )Disabled is now not a right setting) Computer settings/administrative templates/printers/point and print restrictions

Re: Package-Aware Print Drivers?

Morotalizer — Wed, 17 Aug 2016 11:44:32 GMT

If i understand U correctly, only setting GPO "Computer settings/administrative templates/printers/point and print restrictions" to disabled will not solve the problem, you will have to specify the settings in the policy to make it work?

Re: Package-Aware Print Drivers?

grei_70 — Wed, 17 Aug 2016 20:49:09 GMT

By the power of a tweak, thou shall pass the dreaded MS16-087 and letters will be put on paper once again.
You need to register at your local servant that does all your writing. See if he is current in control of his enviroment - there might be an attribute in need of a change. The attribute shall be in form of 16 and Douglas Adams was almost right, he miss it by an inch and odd the answer should be.

Enough rubbish:
If you have trouble deploying printers after applying critical updates according to MS16-087 (KB3170455) try this tweak: Edit the register on your print server. If you change the value of the key PrinterDriverAttributes under HKLM\System\CurrentControlSet\Control\Print\Enviroments\Windowsx64\Drivers\...\Driver name\ and restart the print server, you are able to make Windows treat the driver as packaged, and it will install unattended with gpo. The hex number has to be odd, i.e. 41
Restart server .

According to MS the 1 flag for PrinterDriverAttributes stands for PRINTER_DRIVER_PACKAGE_AWARE. This will treat the driver as package aware, which means a CAB package will be created, including the inf and the catalog. The package will be installed through setupapi.dll when installing the driver, validating that the catalog is trusted, and that hashes for all files are included in the catalog.

Re: Package-Aware Print Drivers?

frank_net — Wed, 17 Aug 2016 20:54:47 GMT

Disable Point and Print restrictions work only is the driver respect this criteria :
Package aware
Digitally signed
Catalogue print drivers

It’s functional for my with HP and Dell printer

This is not the case for some driver Canon (ImageRunner in my case) "NON PACKAGED"

printmanagement.msc:

I contact Canon today there are already aware of the problem and they will probably reissue driver in September

Re: Package-Aware Print Drivers?

grei_70 — Wed, 17 Aug 2016 21:05:17 GMT

While waiting for the new driver , the solution lies in my post. Tweak Windows into treating any driver as Packaged by editing the registry.

Re: Package-Aware Print Drivers?

grei_70 — Thu, 18 Aug 2016 05:12:31 GMT

BTW: To keep the original settings for the printer driver and only make it Pakage aware you shold add 1 to the original value of PrinterDriverAttributes. In my print enviroment the original attribute had the value 4, so I changed it to 5 and that made it Pakage aware. Different versions of the driver (and different vendors) might need other values.

Re: Package-Aware Print Drivers?

frank_net — Thu, 18 Aug 2016 17:13:11 GMT

Hi grei_70,

I had not seen your post yesterday when sending mine, I think we were writing at the same time!
Indeed, your tweak works perfectly. All printers is "Package" now

The deployment also works by GPO
Thank

Re: Package-Aware Print Drivers?

Morotalizer — Tue, 23 Aug 2016 07:45:52 GMT

Above doesnt seem to work on Uniflow Universal PcIXL Driver v 5.3.5.529 on Windows 10

Have changed the registry setting, restarted printer server and the driver is now listed as packaged

Have set the GPO, Point and Print Restrictions to disabled on the comptuer and user object

But same GPO error (0x80070bcb), also if i select the printer manually from print server i get UAC prompted, so it doesnt seem that it cares about the GPO settings...

//Tatsumi

EDIT I suspect that the issue with the Uniflow driver is that it's not signed

Re: Package-Aware Print Drivers?

Morotalizer — Mon, 22 Aug 2016 12:04:05 GMT

As a workaround, i can install the uniflow client msi package with the driver included, that way i get the printer deployed

Re: Package-Aware Print Drivers?

KLo1986 — Wed, 31 Aug 2016 07:25:55 GMT

Hi LJS576,

Do you have any idea if the new driver can work on legency models and current selling models?? My office is having iradvc5045 and iradvc5240.

Thanks

Re: Package-Aware Print Drivers?

moydavis12 — Wed, 21 Sep 2016 21:46:54 GMT

I made this registry change, and now I'm getting a connect to printer error. A policy is in effect on your computer which prevents you from connecting to this print queue. Please contact your system administrator. grei_70 have you seen this error?

Re: Package-Aware Print Drivers?

nejrngksdl — Tue, 27 Sep 2016 19:55:06 GMT

I just tried

https://msdn.microsoft.com/windows/hardware/drivers/print/package-aware-print-drivers-that-do-not-share-files

In a nutshell:

Go to the printers inf-File an add a section

[PrinterPackageInstallation.x86]
PackageAware=TRUE

or (for 64bit driver)

[PrinterPackageInstallation.amd64]
PackageAware=TRUE

and import the driver.

You will get a lot of warnings but ignore them all.

Install your printer and deploy it with gpo like allways and have fun with it!

Re: Package-Aware Print Drivers?

mark4044 — Tue, 20 Dec 2016 18:00:49 GMT

Canon's USA site still does not have Packaged drivers. I was able to find a packaged PCL6 driver (version 21.85) on the Canon's EU site, but it did not work on my C5240 or 6255. It worked on 4225.

I had success on Canon's Asia site. They have a UFR II V30 packaged driver that worked on all the above machines. It took me 3 hours to sort this out, so I hope this reaches someone in need.

http://support-asia.canon-asia.com/

UFRII_Driver_V3000_W64_ukEN_12.exe