Point-and-Print Restrictions and XenApp

I'm running a provisioned XenApp 6.5 Farm and recently updated the HP Universal Print Driver (UPD) on the Print Server to the newest Version because we needed the support for some newer Printer Models.

But after the HP UPD Update the Users weren't able to map HP Printers (with the updated HP UPD) from the Print Server. They would always receive an "Access Denied" Error when trying to map a Printer.

I hadn't updated my provisioned XenApp Image with the new HP Drivers but wanted to to let the Users install the new Drivers until I could update my XenApp Image. But I had disabled the Point and Print Restrictions via GPO and wondered why Users still couldn't install Print Drivers.

While disabling Point and Print Restrictions alone works perfectly on Windows 7 Systems but for Windows Server 2008 R2 disabling Point and Print alone is not enough. You also have to disable the following Security Policy on your XenApp Servers:

And here is the GPO I'm currently using to allow Users to install Print Drivers on my XenApp Servers. Instead of disabling the Point and Print Restrictions completely you can of course also set it to enabled and adjust it accordingly. You can find more information on TechNet.

Citrix XenApp 6/6.5 and the Error: Event 602, PrintService

I recently had a customer where on all XenApp 6 Workers an Error with the EventID 602 from the Source PrintService was logged in the EventViewer during the User Logon Process. This only seemed to happen when using Session-based Printers in the XenApp Session.

After a bit of Research I found a Microsoft KnowledgeBase Article with an Hotfix which fixed the Problem: http://support.microsoft.com/kb/2457866

Note: This Hotfix is NOT included in the Windows Server 2008 R2 Service Pack 1. I have only tested this on XenApp 6, but this should also apply to XenApp 6.5 Systems.