Does anyone know why my Point and Print Restriction policies don't work? I want to restrict users from adding network printers and updating drivers.
I've tried enabling AD GPO as a Computer AND User policy. I've also tried the Local Group Policy. I verified through gpresult /v that the syncs to the clients. Furthermore the registry keys are in HKCU and HKLM\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint.
Users can manually install printers and drivers to Windows 2008 R2 SP1 (XenApp 6.5) and Windows 7 SP1. The users are not Administrators, not Power Users (AD nor local), and not Print Operators. This is a new domain, and per MS KB articles I expected Point and Print Restriction to be on by default but it isn't...