Recently we have started to slowly roll a configuration profile restriction where apps can launch from. Originally I was blocking /Users/$USER, but whenever a user tried to print the PrinterProxy would get blocked. I changed the settings to the following.
I then was getting an error when users added printers so have the following script running, which seems to be working.
/usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group lpadmin
So even after that, users are still seeing the message that the PrinterProxy is being blocked, but when they click okay the print job prints.
Any ideas on why the message is still appearing?
