Allow non-administrators to receive update notifications registry key

According to our description, we want to configure the policy that only administrative users will receive update notifications while the non-admin users will not get notifications. Best regards, Hannah Xiong. Friday, March 20, AM. Hello, If this question has any update or is this issue solved? Also, for the question, is there any other assistance we could provide? Thank you so much for your time and support. Best regards, Hannah Xiong Please remember to mark the replies as answers if they help.

Monday, March 23, AM. Tuesday, March 24, AM. Hello, You are welcome, thank you so much for your feedback. According to your description, we have set it to Disabled. MSC , and then press Enter. Q1: Every time I attempt to print, I receive a prompt saying, "Do you trust this printer," and it requires administrator credentials to continue. Is this expected? A1:Being prompted for every print job is not expected.

The majority of environments or devices that experience this issue will be resolved by installing updates released October 12, or later. These updates address an issue related to print servers and print clients not being in the same time zone. If you are still having this issue after installing updates released October 12, or later, you might need to contact your printer manufacturer for updated drivers.

This issue might also occur when a print driver on the print client and the print server use the same filename, but the server has a newer version of the driver file. When the print client connects to the print server, it finds a newer driver file and is prompted to update the drivers on the print client.

However, the file in the package it is offered for installation does not include the newer driver file version. To mitigate this issue, verify that you are using the latest drivers for all your printing devices. Where possible, use the same version of the print driver on the print client and print server.

If updating drivers in your environment does not resolve the issue, please contact support for your printer manufacturer OEM. Q2: I installed updates released September 14, and some Windows devices cannot print to network printers. Is there an order I need to install updates on print clients and print servers? A2: Before installing updates released September 14, or later on print servers, print clients must have installed updates released January 12, or later.

Windows devices will not print if they have not installed an update released January 12, or later. Note You do not need to install earlier updates and can install any update after January 12, on printing clients. We recommend that you install the latest cumulative update on both clients and servers. Point and Print Default Behavior Change. Introduction to Point and Print. Add and Remove Drivers to an offline Windows Image. Manage drivers - Configuration Manager Microsoft Docs.

Summary Windows updates released August 10, and later will, by default, require administrative privilege to install drivers. By default, non-administrator users will no longer be able to do the following using Point and Print without an elevation of privilege to administrator: Install new printers using drivers on a remote computer or server Update existing printer drivers using drivers from remote computer or server Note If you are not using Point and Print , you should not be affected by this change and will be protected by default after installing updates released August 10, or later.

Modify the default driver installation behavior using a registry key You can modify this default behavior using the registry key in the table below.

Non-administrative users will be able to install all optional recommended and important content for which they received a notification. Users will not see a User Account Control window and do not need elevated permissions to install these updates except in the case of updates that contain User Interface End User License Agreement or Windows Update setting changes. On XP: If you enable this policy setting users will not see a User Account Control window and do not need elevated permissions to do either of these update-related tasks.

On Vista: If you enable this policy setting users will not see a User Account Control window and do not need elevated permissions to do either of these tasks.

Note that on computers running Windows 8 and Windows RT, only notifications related to restarts and the inability to detect updates will be shown. The notification options are not supported. Notifications on the sign-in screen are always displayed. Disabled Users can connect to the Windows Update website. Options: See Enabled in the table for this setting.

This section provides more information about using, opening, and saving WSUS settings in Group Policy, and definitions for terms used in this article. To perform these procedures, you must be a member of the Domain Admins group or its equivalent.

The Group Policy Management Console opens. On the left pane, expand your forest. For example, double-click forest: example. On the left pane, double-click Domains , and then double-click the domain for which you want to manage a Group Policy object.

For example, double-click example. Right-click the domain policy that you want to manage, and then select edit. Right-click the domain for which you want to create a new Group Policy object, and then select Create a GPO in this domain, and link it here. After you've opened the extension of Group Policy that you want, you can use the following steps to enable, disable, or move between settings:.

In Options , if any options are listed, retain the default values or modify them as needed. To save your changes and proceed to the next setting, select Apply , and then select Next Setting. The following table summarizes key differences between the current and past versions of WSUS that are relevant to this article. Group Policy extension or extension of Group Policy A collection of settings in Group Policy that control how users and computers to whom the policies apply can configure and use various Windows services and features.

Administrators can use WSUS with Group Policy for client-side configuration of the Automatic Updates client, to help ensure that users can't disable or circumvent corporate update policies. Client configuration can also be applied by using a local group policy or by modifying the Windows registry. You can't manage WSUS on a replica server. Microsoft Update A Microsoft internet site that stores and distributes updates for Windows computers device drivers , Windows operating systems, and other Microsoft software products.

For example, metadata supplies information for the properties of an update so you can find out what the update is useful for. Metadata also includes Microsoft Software License Terms. The metadata package downloaded for an update is typically much smaller than the update file package. A WSUS infrastructure enables you to manage updates for computers on your network to install.

You can use WSUS to approve or decline updates before release, to force updates to install by a certain date, and to obtain extensive reports on what updates each computer on your network requires. You can configure WSUS to approve certain classes of updates automatically including critical updates, security updates, service packs, and drivers. WSUS also enables you to approve updates for detection only, so that you can see what computers will require a particular update without having to install the update.

Based on network security and configuration, the administrator can determine how many other servers connect directly to Microsoft Update. Windows Update is also the name of a service that runs on Windows computers and detects, downloads, and installs updates. Feedback Submit and view feedback for. Skip to main content. This browser is no longer supported.

Download Microsoft Edge More info. Contents Exit focus mode. Is this page helpful? Please rate your experience Yes No. Any additional feedback? Note This article assumes that you already use and are familiar with Group Policy. Note If the Configure Automatic Updates policy setting is set to Disabled , this policy has no effect. Note If the Configure Automatic Updates policy setting is disabled or is not configured, this policy setting has no effect.

Note Updates from a service other than an intranet Microsoft update service must always be signed by Microsoft. Note This policy is not supported on Windows RT. Note If the No auto-restart with logged on users for scheduled automatic updates installations policy setting is enabled, this policy has no effect.

Note The Specify intranet Microsoft update service location setting must be enabled for this policy to have effect. Note This policy applies only when Automatic Updates is configured to perform scheduled installations of updates. Note This policy applies only when the computer is configured to connect to an intranet update service by using the Specify intranet Microsoft update service location policy setting.

Note This policy applies only when this computer is configured to support the specified target group names in WSUS. Important This policy applies only when Automatic Updates is configured to perform scheduled installations of updates. Note This setting is related to option 4 in Configure Automatic Updates. Note If the operating computer's power-wake policy is explicitly disabled, this setting has no effect. Note By default, unless otherwise noted, these settings are not configured.

Note To perform these procedures, you must be a member of the Domain Admins group or its equivalent. Submit and view feedback for This product This page. View all page feedback. In this article. Windows operating systems that are still within their Microsoft Product Support Lifecycle.

Specifies that updates are not immediately installed. Local administrators can change this setting by using the Local Group Policy Editor.

Specifies that Automatic Updates immediately installs updates after they're downloaded and ready to install. Specifies that users will always see an Account Control window and require elevated permissions to do these tasks. A local administrator can change this setting by using the Local Group Policy Editor. Specifies that Windows Automatic Update and Microsoft Update will include non-administrators when determining which signed-in user will receive update notifications.

Non-administrative users will be able to install all optional, recommended, and important update content for which they received a notification. Users won't see a User Account Control window.

Users don't need elevated permissions to install these updates, except in the case of updates that contain changes to the user interface, Microsoft Software License Terms, or Windows Update settings. Specifies that only logged-on administrators receive update notifications.