NoWarningNoElevationOnInstall enum

Point and Print Restrictions — behavior when INSTALLING a new printer connection (first-time driver install). Controls whether users see a warning and/or elevation (UAC) prompt when Windows Installer installs a new printer driver via Point and Print for the first time. Registry: HKLM\Software\Policies\Microsoft\WindowsNT\Printers\PointAndPrint:NoWarningNoElevationOnInstall (REG_DWORD). CIS Benchmark (L1) requires WARN_AND_ELEVATE_ON_INSTALL (value 0) to mitigate PrintNightmare (CVE-2021-34527). See also UpdatePromptSettings for the update-driver behavior. Reference: Policy CSP - Printers (PointAndPrintRestrictions)

Values

Enum Value	Description
`WARN_AND_ELEVATE_ON_INSTALL`	Show warning and elevation prompt on install (registry value 0). The user sees a warning dialog and must supply administrator credentials before a new printer driver is installed via Point and Print. CIS L1 recommended value.
`NO_WARNING_NO_ELEVATION_ON_UPDATE`	No warning and no elevation on install (registry value 1). New printer drivers are installed silently without warning or credential prompts. Exposes the host to PrintNightmare-class privilege-escalation attacks (CVE-2021-34527).

Used by

ComputerAdministrativeTemplates type: Computer-specific Administrative Templates (ADMX) settings on an Endpoint.

Example

"WARN_AND_ELEVATE_ON_INSTALL"