GPO policy: "Manage processing of Queue-specific files" (ConfigureCopyFilesPolicy) under Computer Configuration > Administrative Templates > Printers. Controls whether vendor-supplied CopyFiles entries in print queues are processed when clients connect to a print server. Registry: HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers:CopyFilesPolicy (REG_DWORD). Introduced to mitigate PrintNightmare-related CopyFiles abuse (CVE-2021-34527 class). Default when unconfigured is value 1 (limit to color profiles). Reference: KB5005010: Restricting installation of new printer drivers
Values
| Enum Value | Description |
|---|---|
|
|
Do not allow Queue-specific files (registry value 0). No CopyFiles entries are processed during print queue or printer connection installation. Most restrictive. |
|
|
Limit Queue-specific files to color profiles only (registry value 1, default). Only CopyFiles entries under the standard ICM color profile scheme (Registry Key CopyFiles\ICM, Directory=COLOR, Module=mscms.dll) are allowed. |
|
|
Allow all Queue-specific files (registry value 2). All CopyFiles entries are processed during printer connection installation. Least restrictive; not recommended. |
Used by
ComputerAdministrativeTemplatestype: Computer-specific Administrative Templates (ADMX) settings on an Endpoint.
Example
Example
"DISABLED"