Allow non-admins to install printers

http://www.windowsnetworking.com/kbase/WindowsTips/Windows7/AdminTips/Miscellaneous/Allownon-adminstoinstallprinters.html

A.

1. Configure the following two Group Policy settings:

  • Computer Configuration\Policies\Administrative Templates\System\Driver Installation\Allow non-administrators to install drivers for these devices setup classes
  • Enabled

2. Device class GUID of printers:

{4d36e979-e325-11ce-bfc1-08002be10318}

{4658ee7e-f050-11d1-b6bd-00c04fa372a7}

  • Computer Configuration/Policies/Administrative Templates/Printers/Point and Print Restrictions
  • Enabled

Security Prompts: When Installing Drivers for a new connection = Do not show warning or elevation prompt

https://community.spiceworks.com/topic/645262-how-to-install-new-printers-via-gpo-when-users-don-t-have-permission

B.

Two GPO settings needed:

User Config\Preferences\Control Panel Settings\ Printers\
Create an item that adds the desired printer (optionally, make it the default)

Computer Config\Preferences\Control Panel Settings\ Printers\
Create an item that adds the desired printer (optionally, make it the default)

* Computer Config\ Policies\Admin Templates\System\Group Policy
Configure user Group Policy loopback processing mode – Enabled

C.

How-to: So You Need To Deploy Printers With Group Policy – Windows 2012 R2

https://community.spiceworks.com/how_to/77664-so-you-need-to-deploy-printers-with-group-policy-windows-2012-r2

http://answers.microsoft.com/en-us/windows/forum/windows_7-hardware/install-network-printers-without-local-admin/b21aa72b-5a7f-485d-999e-f844e7d4a550

Computer Configuration (Enabled) > Policies > Windows Settings >Security Settings >Local Policies/Security Options > Devices
POLICY SETTING
Devices: Prevent users from installing printer drivers Disabled

 

Printers
POLICY SETTING COMMENT
Point and Print Restrictions Enabled
Users can only point and print to these servers: Disabled
Enter fully qualified server names separated by semicolons
Users can only point and print to machines in their forest Disabled
Security Prompts:
When installing drivers for a new connection: Do not show warning or elevation prompt
When updating drivers for an existing connection: Do not show warning or elevation prompt
This setting only applies to:
Windows Vista and later

 

System/Driver Installation
POLICY SETTING COMMENT
Allow non-administrators to install drivers for these device setup classes Enabled
ALLOW USERS TO INSTALL DEVICE DRIVERS FOR THESE CLASSES:
{4d36e979-e325-11ce-bfc1-08002be10318}
{4658ee7e-f050-11d1-b6bd-00c04fa372a7}
To create a list of device classes, click Show. In the Show Contents dialog box, in the Value column,
type a GUID that represents a device setup class
(for example, {25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}).

 

This will allow non-admin users to install and manage printers on computers without admin access. Pay close attention to ” Allow Users to install device drivers for these classes: ” as you will need to add these two GUIDs to the GPO. If you have any questions, let me know and I’ll try to assist you the best I can.

Partial credit to Chad_Anderson over on the TechNet forums. [ SOURCE ]

http://www.theitcave.com/post/30

 

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s