Help with allowing users to install local printers

So I haven't worked with Windows security/GP in a while and I'm having trouble figuring out if what I want to do is possible.

Goals:
Keep regular users from installing software while allowing them to install new local printers (ideally they could install any hardware they need).

Currently all users have regular user accounts on their laptops, and therefor cannot install software or new local printers. My users are mobile and use portable printers in their cars, if the portable printer is installed by an admin the user can use it fine. However when users switch cars (which they do regularly) the new printer (which is the exact same model) cannot be installed without an admin user logging in and installing it.

From searching the internet it appears that it is not possible to allow a regular user to install a new local printers and there is no easy way to restrict power users from installing software (another solution I toyed around with). I'm not worried about advanced users using the ability to install drivers to escalate privileges or anything of that nature, I just want to keep the average user from installing iTunes.

Any suggestions would be appreciated.

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

Hyper-Me

How many cars/users?

If its a relatively small amount, I dont see a huge issue in simply installing all printers to all users via a GPO.

kalebksp

Probably about a hundred. Is it possible to use GP to install local USB printers?

Claymoore

Who makes the printers? The HP universal print driver can connect to usb printers. Instructions on how to do this are one of the few things I ever bothered to post over on my blog: Clay Moore’s Blog

kalebksp

Claymoore wrote: »

Who makes the printers? The HP universal print driver can connect to usb printers. Instructions on how to do this are one of the few things I ever bothered to post over on my blog: Clay Moore’s Blog

Pentax/Brother

stephens316

Viewfinity | Elevate Privileges

check this out:D

kalebksp

Claymoore wrote: »

Who makes the printers? The HP universal print driver can connect to usb printers. Instructions on how to do this are one of the few things I ever bothered to post over on my blog: Clay Moore’s Blog

Although the HP Universal driver didn't help with this issue, but I was also having a problem with the notifications some users were receiving from the universal driver. The blog post about the ADM template was very helpful. Thanks!

stephens316 wrote: »

Viewfinity | Elevate Privileges

check this out:D

That looks like it would fit the bill. Although it doesn't list pricing, never a good sign. Thanks!