Applies to
The software download link received is not the correct one for the software products I ordered, what should I do? Please contact your Honeywell account manager to check the software model number(s) which had been ordered. Honeywell employees: get quick access to HR Direct and request Remote Access. Find more about US Retirees.
- Windows 10
Describes the best practices, location, values, and security considerations for the Devices: Prevent users from installing printer drivers security policy setting.
Reference
For a device to print to a network printer, the driver for that network printer must be installed locally. The Devices: Prevent users from installing printer drivers policy setting determines who can install a printer driver as part of adding a network printer. When you set the value to Enabled, only Administrators and Power Users can install a printer driver as part of adding a network printer. Setting the value to Disabled allows any user to install a printer driver as part of adding a network printer. This setting prevents unprivileged users from downloading and installing an untrusted printer driver.
This setting has no impact if you have configured a trusted path for downloading drivers. When using trusted paths, the print subsystem attempts to use the trusted path to download the driver. If the trusted path download succeeds, the driver is installed on behalf of any user. If the trusted path download fails, the driver is not installed and the network printer is not added.
Although it might be appropriate in some organizations to allow users to install printer drivers on their own workstations, this is not suitable for servers. Installing a printer driver on a server can cause the system to become less stable. Only administrators should have this user right on servers. A malicious user might deliberately try to damage the system by installing inappropriate printer drivers.
Possible values
- Enabled
- Disabled
- Not defined
Best practices
- It is advisable to set Devices: Prevent users from installing printer drivers to Enabled. Only users in the Administrative, Power User, or Server Operator groups will be able to install printers on servers. If this policy setting is enabled, but the driver for a network printer already exists on the local computer, users can still add the network printer. This policy setting does not affect a user's ability to add a local printer.
Location
Computer ConfigurationWindows SettingsSecurity SettingsLocal PoliciesSecurity Options
Default values
The following table lists the actual and effective default values for this policy. Default values are also listed on the policy’s property page.
Server type or GPO | Default value |
---|---|
Default Domain Policy | Not defined |
Default Domain Controller Policy | Not defined |
Stand-Alone Server Default Settings | Enabled |
DC Effective Default Settings | Enabled |
Member Server Effective Default Settings | Enabled |
Client Computer Effective Default Settings | Disabled |
Policy management
This section describes features and tools that are available to help you manage this policy.
Restart requirement
None. Changes to this policy become effective without a computer restart when they are saved locally or distributed through Group Policy.
Security considerations
This section describes how an attacker might exploit a feature or its configuration, how to implement the countermeasure, and the possible negative consequences of countermeasure implementation.
Vulnerability
It may be appropriate in some organizations to allow users to install printer drivers on their own workstations. However, you should allow only administrators, not users, to do so on servers because printer driver installation on a server may unintentionally cause the computer to become lessstable. A malicious user could install inappropriate printer drivers in a deliberate attempt to damage the computer, or a user might accidentally install malicious software that masquerades as a printer driver.
Countermeasure
Enable the Devices: Prevent users from installing printer drivers setting.
Potential impact
Only members of the Administrator, Power Users, or Server Operator groups can install printers on the servers. If this policy setting is enabled but the driver for a network printer already exists on the local computer, users can still add the network printer.
Related topics
Compass®Windows® Compatible Network Downloader
Works with Honeywell Home VISTA and LYNX controls
Compass Downloader for Windows Software takes security system programming to a whole new level. This network compatible software provides a quick and easy method for planning, designing and communicating with the control panels. With Compass Downloader for Windows, you can also upload system programming that has been manually entered into the panel, or previously downloaded.
By using Compass Downloader for Windows, programming can be performed at the office prior to installation, or can be downloaded from a PC, a Laptop with a 4100SM Serial Module (where the control panel supports it) or with a CIA modem
Compass Downloader for Windows' menu-driven format makes it easy to learn and use!
Program Features
Change/History
The Compass change feature reviews all system changes initiated by the download operator within the current session. A complete record of system modifications and the history of an account is also available.
DOS Conversion
With Compass, DOS conversion is seamless. Compass makes a copy of the existing DOS database and converts it to the Windows format.
Error Check
Distinct technology incorporated into Compass guides you through system programming. To ensure proper panel set-up, an error checking feature monitors programming and provides on-screen error alerts.
Help
An on-screen help bar is displayed along the bottom of each screen for prompt assistance. Programming field numbers within each screen provide easy reference to the program sheet for installation and service.
Networkable
Completely network compatible, Compass is engineered to accommodate up to 255 users. Multiple users may access the program and download simultaneously. Compass runs on Peer-to-Peer and LAN based networks such as Novell® and Lantastic®. Each workstation can support its own modem.
Search Engine
This new search engine allows quick and easy access to panel features. Simply type the desired feature name or the programming field number and the system will bring you directly to the appropriate screen, folder and feature location.
Templates
Unlimited templates allow for design of master accounts which result in a selection of options to expedite set-up.
User-definable fields
With user-definable fields, you have the option to customize your accounts screen. Gather and display the information most important to your company.
Security Driver Game
System Requirements
- Processor: Pentium II or better (we do not support running Compass on Apple machines)
- RAM: 512 MB minimum 1GB recommended
- HDD: 1.2 GB minimum, 2GB Recommended
- Operating System: Windows XP Service Packs 2 or 3, Windows 2003,2005,2008 Server, Windows Vista Business*, Windows Vista Ultimate*, Windows Vista Home Basic*, Windows 7 32bit (XP Mode required for 100% compatibility. XP Mode is not available on Windows 7 Home edition), Windows 7 64 bit (XP Mode required for 100% compatibility. XP Mode is not available on Windows 7 Home edition). Windows Server 2012, Windows 8, 8.1 (with version 2.2.7.5) (only with SQL 2008), Windows 10
- Database Application: MS SQL Server 2000, MS SQL Server 2005,MS SQL 2005 express, MS SQL Express, MS SQL server 2008. MS SQL 2008 express , MS SQL 2012
- Unattended Server: Windows Server 2008 32bit, Windows 7 32bit Ram-4GB HDD->10GB space Processor-2.60GHz
- Display: 1024x768 minimum, 1280x800 Recommended
- Browser: Microsoft Internet Explorer 5.5 or above (this is for displaying the Help files)
- CD-ROM Drive, or other access to installation files (Internet, Local Area Network, etc.)
Download Honeywell Dvr Software
All trademarks are the property of their respective owners.