Active Directory, Users, printing

[wiimike]

My users (not power users, not admins) cannot add local printers. I know this is part of the intentional stuff that gets lumped with being a "user".

Can I circumvent this for certain groups? Changing a "user" to have a GPO applied to them which allows adding of printers, and loading and unloading drivers does nadda, it still leaves the "local printer" bit greyed out of their "add a printer".

Just added info, they are allowed to add networked printers, they are as I said just plain "users".

I do wish to keep these people "users" instead of "power users" because I do not want these people installing programs.

 

[wiimike]

Local Policies/Security Options
Devices
Policy Setting
Devices: Prevent users from installing printer drivers Disabled


Control Panel/Printers
Policy Setting
Prevent addition of printers Disabled

Policy Setting
Load and unload device drivers

I see that on the computer, with an account this is applied to, it still will not allow me to add a local printer

 

[bracadar]

If you want them to stay in the Users group then you're going to have to install the printers as Admin for them.