SOLVED:A policy is in effect on your computer which prevents you from connecting to this print queue

[Doug_Wright]

Windows 7 client

Windows Server 2008 R2 print server

HP Laserjet CP6015x (driver: HP Universal Printing PCL 6 (v5.5.0 61.130.4.12834))

When attempting to install this network printer the following popup was observed:

A policy is in effect on your computer which prevents you from connecting to this print queue

Turned out to be a print spooler security update KB3170455

Uninstalling this update fixed the issue.

Hope this helps somebody 🐵

-Doug

[InfoCrash]

I have been looking for a fix for this issue for over a month, and could hardly find any info which seemed relevant to the situation.  Just now found this tip.  It certainly fixed the issue for me.

I'll have to play around a little, though, even now that I know that this problem was caused by a security update, because the vulnerabilities this update intends to address are certainly valid -- and, my network being that of a public school district, it's certainly always "at risk" for attacks from students who would like to test their "hacking" abilities.  But even still, it's good to finally know what the root cause of this issue actually is.  Before, I was grasping at straws.

My own post about the issue, describing the problems I was having in detail:
http://h30434.www3.hp.com/t5/Printer-Software-and-Drivers/Shared-HP-Network-Printers-suddenly-can-t-...

Microsoft's security bulliten about the update:

https://technet.microsoft.com/library/security/ms16-087?f=255&MSPPError=-2147217396

A helpful thread on Reddit which also addresses this issue:

https://www.reddit.com/r/sysadmin/comments/4stcdo/kb3170455_stops_nonadmin_users_from_installing_a/

[Kmanandhar]

I have tested by uninstalling KB3170455 on client machine (Win 7 64bit) but it did not help to install network share printer hosted hosted on Print Server.

The issue was NOT resolved. It was still displaying the same message.

[Riddle_Decipher]

@Kmanandhar

Welcome to HP Forums, 

This is a great place to get support, find answers and tips, 

Thank you for posting your query, I'll be more than glad to help you out 🙂 

As I understand you are not able to connect to your printer due to the error message,

Don't worry as I'll be glad to help, however, to provide an accurate resolution, I need a few more details: 

What is the product number of your device? Use this link to find it: http://support.hp.com/us-en/document/c03754824 

(Ensure you do not share any of your personal information such as serial, phone number, email ID, etc...).

Have you followed all the links mentioned in the same thread by the other experts?

While you respond to that, here's a few things to do:

Please ensure the printer is working as a copier,

Print a test page from the printer as a standalone to check if it prints fine before troubleshooting the issue further.

To resolve this issue, modify the Group Policy settings for the Group Policy object (GPO) that has printer policies defined for the domain users on the domain controller. To do this, use one of the following methods.

Method 1

1. Configure the Load and unload device drivers policy setting for the Power Users group. To do this, follow these steps:
   1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
   2. In the navigation pane, right-click your domain name, and then click Properties.
   3. Click the Group Policy tab, click the GPO that you want to modify, and then click Edit.
   4. In Group Policy Object Editor, locate and then click the Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment folder.
   5. Locate and then double-click Load and unload device drivers.
   6. Click to select the Define these policy settings check box, and then click Add User or Group to add the Power Users domain group.
   7. In the Add User or Group dialog box, click Browse to locate the Power Users domain group. Under Enter the object names to select, type Power Users, and then click Check Names to resolve the group name. Click OK three times.
2. Turn off the Disallow installation of printers using kernel-mode drivers policy. To do this, follow these steps:
   1. In the left pane, locate and then click the Computer Configuration\Administrative Templates\Printers folder.
   2. Locate and then double-click Disallow installation of printers using kernel-mode drivers, click Disabled, and then click OK.
3. Disable the Point and Print Restrictions policy. To do this, follow these steps:
   1. In the left pane, locate and then click the User Configuration\Administrative Templates\Control Panel\Printers folder.
   2. Locate and then double-click Point and Print Restrictions, click Disabled, and then click OK.
4. On the File menu, click Exit.
5. Click Start, click Run, type cmd.exe, and then click OK.
6. At the command prompt, type gpupdate /force, and then press ENTER.
7. Repeat steps 5 through 6 on the Windows XP SP1-based and Windows Server 2003-based client computers of the domain.

Method 2

1. On the Windows Server 2003-based print server, click Start, click Run, type Cmd, and then click OK.
2. At the command prompt, type C:\, and then press ENTER.
3. Type Cd\, and then press ENTER.
4. Type Ipconfig /all, and then press ENTER.
5. Write down the IP address of the print server computer.
   
   Note The output for the Ipconfig /all command may resemble the following:

   Windows IP Configuration Host Name . . . . . . . . . . . . : MachineName Primary Dns Suffix . . . . . . . : DomainName.com DNS Suffix Search List. . . . . . : DomainName.com Ethernet adapter LAN: IP Address. . . . . . . . . . . . : 169.0.0.10 Subnet Mask . . . . . . . . . . . : 255.255.252.0 DNS Servers . . . . . . . . . . . : 169.0.0.1 169.0.0.2 169.0.0.3

6. On the Windows XP-based client computer, click Start, click Run, type Cmd, and then click OK.
7. At the command prompt, type C:\, and then press ENTER.
8. Type Cd\, and then press ENTER.
9. Type Nslookup PrintServer_IP, and then press ENTER.
   
   Note PrintServer_IP is the IP address that you wrote down in step 5.
10. Make sure that the output of the NsLookup command contains the correct fully qualified domain name (FQDN) of the print server. If it is incorrect, you must contact the network administrator to resolve the DNS issue.

Keep me posted for further assistance 😉