• July 17, 2017
    Announcement: New site design for Microsoft Community

    In July, Microsoft will roll out the first of ongoing site improvements aimed to modernize Microsoft Community and help customers get the most out of their community experience.

    • During the roll out period, you may see the old or new site design depending on your location

    • We expect the roll out to finish by 31 July

    Note: Past private message conversations will not move to the new site design. Please save any private messages you would like to keep.

     Learn more about the upcoming site improvements in this thread.

    Thank you for being part of Microsoft Community!

 
Question
102432 views

Install Network printers without Local admin rights in windows 7

ChrisC1227 asked on
I need to allow general users to select Network Printers on our domain and install them without getting prompted for Password of Administrator. is this possible. or does the admin have to install it at all times. is this a builtin windows feature to protect the pc from things being installed on it. I have tried a few soultions and none of them worked. I tried allow non administrators to install and put the GUID for printer in there and it didn't work. the only way I can get this to work is by adding the drivers on the PC as administrator and then the local user can install the printer. because the driver is already installed.
48 people had this question

Abuse history


The answered status icon Answer
ChrisC1227 replied on

This worked for me... found this after I posted the above. hope it helps some of you having the same issue. I did this on my local pc not the Domain GPO so it would work in either place.

 

There are TWO "Point and Print Restrictions" settings

  • Computer Configuration/Policies/Administrative Templates/Printers/Point and Print Restrictions
  • User Configuration/Policies/Administrative Templates/Control Panel/Printers/Point and Print Restrictions

Of these two, the one under Computer Configuration seems to be the important one. But guess what? The original Server 2008 doesn't include this setting in the list -- you need Server 2008R2 for this setting to show up. If you download the administrative templates from Server 2008 R2, extract, and copy the PolicyDefinitions folder to C:\Windows\sysvol\domain\Policies\PolicyDefinitions, this missing policy will show up magically in Group Policy Management Editor. Of course, the ADMX files from Server 2008 R2 causes Group Policy Management Editor from Server 2008 tocomplain about parse errors, but it works just fine to click "OK".


Once you've installed the proper ADMX files, for this to work in Windows 7, configure both of these "Point and Print Restrictions" settings to:
  • Enabled
  • Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt
  • Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt

Also, don't forget to make sure the users have permission to install printer drivers, since you're not even going to try to use Admin privileges any more:
  • Computer Configuration\Policies\Administrative Templates\System\Driver Installation
  • The setting is called "Allow non-administrators to install drivers for these devices setup classes".
  • You will need to add thedevice class GUID of printers:  {4d36e979-e325-11ce-bfc1-08002be10318}

Don't forget to update the computer policy on the workstation by running "gpupdate /force". Then log on as a non-admin user, and test! It worked for me with an annoying Konica Minolta bizhub C550 fax driver that was prompting my Win7 non-admin users for privileges when the logon script tried to install the driver for them. YMMV.


Good luck!
1 person found this helpful

Abuse history


progress