Project

General

Profile

Tâche #11765

Distribution EOLE - Scénario #14167: Mettre à jour les règles et paramétrages ESU

Vérifier les règles ESU pour les imprimantes

Added by Klaas TJEBBES almost 8 years ago. Updated about 7 years ago.

Status:
Fermé
Priority:
Normal
Assigned To:
Klaas TJEBBES
Target version:
Distribution EOLE - Sprint 2015 49-51 - Équipe MENESR
Start date:
05/26/2015
Due date:
% Done:

100%

Estimated time:
2.00 h
Spent time:
2.00 h
Remaining (hours):
0.0

Description

Il y a une règle en double :

[k@kls Console (MASTER)]$ grep Restricted ListeRegles.xml 
                                                        <Variable nom="Restricted" type="DWORD">
                                                        <Variable nom="Restricted" type="DWORD">

https://dev-eole.ac-dijon.fr/projects/eole-esu/repository/revisions/8822680ad40dddfdf8e3840f7a443c5958a70f36/diff/esu/Console/ListeRegles.xml

Installation des pilotes non-signés à décortiquer :

j'ai enfin retrouvé l'etablissement ou j'avais testé ... et j'ai retrouvé le .reg

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint]
"Restricted"=dword:00000001
"TrustedServers"=dword:00000000
"ServerList"="" 
"InForest"=dword:00000001
"NoWarningNoElevationOnInstall"=dword:00000001
"UpdatePromptSettings"=dword:00000002




"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverInstall\Restrictions\AllowUserDeviceClasses", "00000001","REG_DWORD" 
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverInstall\Restrictions\AllowUserDeviceClasses\1", "{6BDD1FC6-810F-11D0-BEC7-08002BE2092F}","REG_SZ" 
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverInstall\Restrictions\AllowUserDeviceClasses\2", "{48721B56-6795-11D2-B1A8-0080C72E74A2}","REG_SZ" 
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverInstall\Restrictions\AllowUserDeviceClasses\3", "{49CE6AC8-6F86-11D2-B1E5-0080C72E74A2}","REG_SZ" 
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverInstall\Restrictions\AllowUserDeviceClasses\4", "{4658EE7E-F050-11D1-B6BD-00C04FA372A7}","REG_SZ" 
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverInstall\Restrictions\AllowUserDeviceClasses\5", "{4D36E971-E325-11CE-BFC1-08002BE10318}","REG_SZ" 
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverInstall\Restrictions\AllowUserDeviceClasses\6", "{4D36E979-E325-11CE-BFC1-08002BE10318}","REG_SZ" 
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverInstall\Restrictions\AllowUserDeviceClasses\7", "{8FCEE422-B109-4758-9A6E-5BAB7B37996F}","REG_SZ"

plus d'infos sur ces GUID ici
https://msdn.microsoft.com/en-us/library/windows/hardware/ff553426(v=vs.85).aspx

Associated revisions

Revision b59bef4c (diff)
Added by Klaas TJEBBES over 7 years ago

Ajout de règles pour l'installation silencieuse d'imprimante réseau REF #11765 @2h

Revision db2801a7 (diff)
Added by Klaas TJEBBES over 7 years ago

ajout de règle pour l'installation de pilote d'imprimantes sans question REF #11765

History

#1 Updated by Klaas TJEBBES almost 8 years ago

  • Distribution changed from EOLE 2.5 to EOLE 2.4

#2 Updated by Klaas TJEBBES over 7 years ago

  • Tracker changed from Anomalie to Tâche
  • Parent task set to #14167

#3 Updated by Scrum Master over 7 years ago

  • Status changed from Nouveau to En cours

#4 Updated by Scrum Master over 7 years ago

  • Description updated (diff)
  • Assigned To set to Klaas TJEBBES
  • Parent task changed from #14167 to #10707

#5 Updated by Klaas TJEBBES over 7 years ago

Une GPO couvre les restrictions d'accès aux imprimantes et à l'installation de leurs pilotes :
https://support.microsoft.com/en-us/kb/2307161

Les clés de registre correspondantes sont :

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint]
"InForest"=dword:00000000
"Restricted"=dword:00000000
"TrustedServers"=dword:00000000

#6 Updated by Klaas TJEBBES over 7 years ago

  • Parent task deleted (#10707)

#7 Updated by Klaas TJEBBES over 7 years ago

  • Parent task set to #14167

#8 Updated by Klaas TJEBBES over 7 years ago

  • Status changed from En cours to Résolu

#9 Updated by Klaas TJEBBES over 7 years ago

  • % Done changed from 0 to 100

#10 Updated by Joël Cuissinat about 7 years ago

  • Status changed from Résolu to Fermé
  • Remaining (hours) set to 0.0

=> à valider #14534

#11 Updated by Joël Cuissinat about 7 years ago

  • Estimated time set to 2.00 h

#12 Updated by Joël Cuissinat about 7 years ago

Fait uniquement pour 2.5.2. Il est normal que la règle "Restricted" apparaisse deux fois car son emplacement (HkLM/HKCU) dépend de l'OS.

root@amonecole:~# grep -A1 PointAndPrint /home/esu/Console/ListeRegles.xml 
                        <Chemin>REG://HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint</Chemin>
                        <Variable nom="Restricted" type="DWORD">
--
                        <Chemin>REG://HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint</Chemin>
                        <Variable nom="InForest" type="DWORD">
--
                        <Chemin>REG://HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint</Chemin>
                        <Variable nom="TrustedServers" type="DWORD">
--
                        <Chemin>REG://HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint</Chemin>
                        <Variable nom="NoWarningNoElevationOnInstall" type="DWORD">
--
                        <Chemin>REG://HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint</Chemin>
                        <Variable nom="UpdatePromptSettings" type="DWORD">
--
                            <Chemin>REG://HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint</Chemin>
                            <Variable nom="Restricted" type="DWORD">

Also available in: Atom PDF