Allow non-admins to install printers

1. Configure the following two Group Policy settings:

  • Computer Configuration\Policies\Administrative Templates\System\Driver Installation\Allow non-administrators to install drivers for these devices setup classes
  • Enabled

2. Device class GUID of printers: {4d36e979-e325-11ce-bfc1-08002be10318}

  • Computer Configuration/Policies/Administrative Templates/Printers/Point and Print Restrictions
  • Enabled

Security Prompts: When Installing Drivers for a new connection = Do not show warning or elevation prompt

http://www.windowsnetworking.com/kbase/WindowsTips/Windows7/AdminTips/Miscellaneous/Allownon-adminstoinstallprinters.html

http://answers.microsoft.com/en-us/windows/forum/windows_7-hardware/install-network-printers-without-local-admin/b21aa72b-5a7f-485d-999e-f844e7d4a550

 

Computer Configuration (Enabled) > Policies > Windows Settings >Security Settings >Local Policies/Security Options > Devices
POLICY SETTING
Devices: Prevent users from installing printer drivers Disabled

 

Printers
POLICY SETTING COMMENT
Point and Print Restrictions Enabled
Users can only point and print to these servers: Disabled
Enter fully qualified server names separated by semicolons
Users can only point and print to machines in their forest Disabled
Security Prompts:
When installing drivers for a new connection: Do not show warning or elevation prompt
When updating drivers for an existing connection: Do not show warning or elevation prompt
This setting only applies to:
Windows Vista and later

 

System/Driver Installation
POLICY SETTING COMMENT
Allow non-administrators to install drivers for these device setup classes Enabled
ALLOW USERS TO INSTALL DEVICE DRIVERS FOR THESE CLASSES:
{4d36e979-e325-11ce-bfc1-08002be10318}
{4658ee7e-f050-11d1-b6bd-00c04fa372a7}
To create a list of device classes, click Show. In the Show Contents dialog box, in the Value column,
type a GUID that represents a device setup class
(for example, {25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}).

 

This will allow non-admin users to install and manage printers on computers without admin access. Pay close attention to ” Allow Users to install device drivers for these classes: ” as you will need to add these two GUIDs to the GPO. If you have any questions, let me know and I’ll try to assist you the best I can.

Partial credit to Chad_Anderson over on the TechNet forums. [ SOURCE ]

http://www.theitcave.com/post/30

 

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s