Microsoft
MicrosoftThanks for your article hewagen.
As a Senior IT expert helping customers with the transition, which includes maintaining their GPO my main questions / concerns are:
1. Why does Microsoft maintain two ADMX policy sets in the first place? The Windows 11 ADMX should contain all settings and should be highly compatible with Windows 10 21H2 or earlier supported versions. It baffles me to be honest.
2. Why is the Windows 10 21H2 kept being updated and the other Windows 11 21H2 ADMX not being updated for a long time now, and as such missing settings?
There is nothing worse than GPP or registry hacks imho if it is avoidable.
3. Microsoft should understand this approach is not feasible. Even more we now have no further SAC but GAC starting with 21H2, the efforts to combine the templates should be considered. The gap, as per example below, can only get worse.
EXAMPLE:
hewagen your table is missing a difference in both settings, the setting is (still) missing in Windows 11 ADMX, due them being pretty much outdated compared to the Windows 10 21H2 ADMX. The release of Windows 11 ADMX missed this change by 2 days a week only , which now cause uneccessary confusion.
References:
KB5005010: Restricting installation of new printer drivers after applying the July 6, 2021 updates (microsoft.com)
Set RestrictDriverInstallationToAdministrators using Group Policy
After installing updates released October 12, 2021 or later, you can also set RestrictDriverInstallationToAdministrators using a Group Policy, using the following instructions:
Open the group policy editor tool and go to Computer Configuration > Administrative Templates > Printers.
Set the Limits print driver installation to Administrators setting to "Enabled". This will set the registry value of RestrictDriverInstallationToAdministrators to 1.
