This policy setting controls whether the computer can download print driver packages over HTTP. To set up HTTP printing, printer drivers that are not available in the standard operating system installation might need to be downloaded over HTTP. Countermeasure: Enable this setting to prevent print drivers from being downloaded over HTTP. Potential Impact: This policy setting does not prevent the client computer from printing to printers on the intranet or the Internet over HTTP. It only prohibits drivers that are not already installed locally from downloading. Fix: (1) GPO: Computer ConfigurationAdministrative TemplatesSystemInternet Communication ManagementInternet Communication settingsTurn off downloading of print drivers over HTTP (2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindows NTPrinters!DisableWebPnPDownload

[enabled/disabled]

(1) GPO: Computer Configuration\Administrative Templates\System\Internet Communication Management\Internet Communication settings\Turn off downloading of print drivers over HTTP (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload