Restrict printing from Office of documents opened in Application Guard: registry value disablexpsprintsettings and 3 moreUserHKCU\software\policies\microsoft\office\16.0\common\security\applicationguard

Policy ID: L_TurnOffPrintSettingsInApplicationGuard
Scope: User Configuration
Supported on: At least Windows Server 2016, Windows 10
Source: Microsoft 365 Apps / Office Administrative Templates (version 5568.1000)
Category: Microsoft Office 2016 › Security Settings › Trust Center › Application Guard

This policy setting allows you to control how users can print from Office documents opened in Application Guard.
If you enable this policy setting, you can choose to selectively retrict one or more of the following printing options.
- Don't allow printing to XPS, prevents users from printing as XPS and saving the resulting file on the host.
- Don't allow printing to PDF, prevents users from printing as PDF and saving the resulting file on the host.
- Don't allow printing to local printers, prevents users from printing to locally attached printers.
- Don't allow printing to existing network printers, prevents users from printing to previously connected network printers. Also, users can't search for additional printers.
Note: if you select all the choices or don’t select any of the choices, then printing isn’t allowed in Application Guard.

See the full description on the Group Policy page ›

Registry

disablexpsprintsettings

REG_DWORDUser

HKCU\software\policies\microsoft\office\16.0\common\security\applicationguard Current key

Checked: 1
Unchecked: 0
Element: Disable XPS printing
Value type: REG_DWORD

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\software\policies\microsoft\office\16.0\common\security\applicationguard]

; Options (use only one)
; Checked
"disablexpsprintsettings"=dword:00000001
; Unchecked
"disablexpsprintsettings"=dword:00000000

CMD

:: Options (use only one)

:: Checked
reg add "HKCU\software\policies\microsoft\office\16.0\common\security\applicationguard" /v "disablexpsprintsettings" /t REG_DWORD /d 1 /f
:: Unchecked
reg add "HKCU\software\policies\microsoft\office\16.0\common\security\applicationguard" /v "disablexpsprintsettings" /t REG_DWORD /d 0 /f

PowerShell

# Common: create the key
New-Item -Path 'HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard' -Force | Out-Null

# Options (use only one)
# Checked
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard' -Name 'disablexpsprintsettings' -PropertyType DWord -Value 1 -Force | Out-Null
# Unchecked
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard' -Name 'disablexpsprintsettings' -PropertyType DWord -Value 0 -Force | Out-Null

disablepdfprintsettings

REG_DWORDUser

HKCU\software\policies\microsoft\office\16.0\common\security\applicationguard Current key

Checked: 1
Unchecked: 0
Element: Disable PDF printing
Value type: REG_DWORD

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\software\policies\microsoft\office\16.0\common\security\applicationguard]

; Options (use only one)
; Checked
"disablepdfprintsettings"=dword:00000001
; Unchecked
"disablepdfprintsettings"=dword:00000000

CMD

:: Options (use only one)

:: Checked
reg add "HKCU\software\policies\microsoft\office\16.0\common\security\applicationguard" /v "disablepdfprintsettings" /t REG_DWORD /d 1 /f
:: Unchecked
reg add "HKCU\software\policies\microsoft\office\16.0\common\security\applicationguard" /v "disablepdfprintsettings" /t REG_DWORD /d 0 /f

PowerShell

# Common: create the key
New-Item -Path 'HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard' -Force | Out-Null

# Options (use only one)
# Checked
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard' -Name 'disablepdfprintsettings' -PropertyType DWord -Value 1 -Force | Out-Null
# Unchecked
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard' -Name 'disablepdfprintsettings' -PropertyType DWord -Value 0 -Force | Out-Null

disablelocalprintsettings

REG_DWORDUser

HKCU\software\policies\microsoft\office\16.0\common\security\applicationguard Current key

Checked: 1
Unchecked: 0
Element: Disable Local printing
Value type: REG_DWORD

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\software\policies\microsoft\office\16.0\common\security\applicationguard]

; Options (use only one)
; Checked
"disablelocalprintsettings"=dword:00000001
; Unchecked
"disablelocalprintsettings"=dword:00000000

CMD

:: Options (use only one)

:: Checked
reg add "HKCU\software\policies\microsoft\office\16.0\common\security\applicationguard" /v "disablelocalprintsettings" /t REG_DWORD /d 1 /f
:: Unchecked
reg add "HKCU\software\policies\microsoft\office\16.0\common\security\applicationguard" /v "disablelocalprintsettings" /t REG_DWORD /d 0 /f

PowerShell

# Common: create the key
New-Item -Path 'HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard' -Force | Out-Null

# Options (use only one)
# Checked
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard' -Name 'disablelocalprintsettings' -PropertyType DWord -Value 1 -Force | Out-Null
# Unchecked
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard' -Name 'disablelocalprintsettings' -PropertyType DWord -Value 0 -Force | Out-Null

disablenetworkprintsettings

REG_DWORDUser

HKCU\software\policies\microsoft\office\16.0\common\security\applicationguard Current key

Checked: 1
Unchecked: 0
Element: Disable Network printing
Value type: REG_DWORD

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\software\policies\microsoft\office\16.0\common\security\applicationguard]

; Options (use only one)
; Checked
"disablenetworkprintsettings"=dword:00000001
; Unchecked
"disablenetworkprintsettings"=dword:00000000

CMD

:: Options (use only one)

:: Checked
reg add "HKCU\software\policies\microsoft\office\16.0\common\security\applicationguard" /v "disablenetworkprintsettings" /t REG_DWORD /d 1 /f
:: Unchecked
reg add "HKCU\software\policies\microsoft\office\16.0\common\security\applicationguard" /v "disablenetworkprintsettings" /t REG_DWORD /d 0 /f

PowerShell

# Common: create the key
New-Item -Path 'HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard' -Force | Out-Null

# Options (use only one)
# Checked
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard' -Name 'disablenetworkprintsettings' -PropertyType DWord -Value 1 -Force | Out-Null
# Unchecked
New-ItemProperty -Path 'HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard' -Name 'disablenetworkprintsettings' -PropertyType DWord -Value 0 -Force | Out-Null