Windows: Allow non-admin users to install printers & printer drivers

There's a good chance this content may be outdated!

This post is 4 years old—a long time on the internet. Any content within is provided as-is and is not guaranteed to work on modern systems - your mileage may vary.

This is a post that I originally posted on my personal blog. It has some great value so I figured I’d move it over to the cave.

This is a very handy GPO that you can implement on your network to allow non-admin users to manage printers. This is great, especially if your users move around a bit or, like, in my company, users have laptops that they take home and can work from home. My users need to be able to install printers and manage them without administrator access.Here’s what you do.

Create a new GPO and call it whatever you’d like. Remember: it’s bad practice to use the “Default Domain Policy”. Apply the following settings:

 

Computer Configuration (Enabled) > Policies > Windows Settings >Security Settings >Local Policies/Security Options > Devices
POLICY SETTING
Devices: Prevent users from installing printer drivers Disabled

 

Printers
POLICY SETTING COMMENT
Point and Print Restrictions Enabled
Users can only point and print to these servers: Disabled
Enter fully qualified server names separated by semicolons
Users can only point and print to machines in their forest Disabled
Security Prompts:
When installing drivers for a new connection: Do not show warning or elevation prompt
When updating drivers for an existing connection: Do not show warning or elevation prompt
This setting only applies to:
Windows Vista and later

 

System/Driver Installation
POLICY SETTING COMMENT
Allow non-administrators to install drivers for these device setup classes Enabled
ALLOW USERS TO INSTALL DEVICE DRIVERS FOR THESE CLASSES:
{4d36e979-e325-11ce-bfc1-08002be10318}
{4658ee7e-f050-11d1-b6bd-00c04fa372a7}
To create a list of device classes, click Show. In the Show Contents dialog box, in the Value column,
type a GUID that represents a device setup class
(for example, {25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}).

 

This will allow non-admin users to install and manage printers on computers without admin access. Pay close attention to ” Allow Users to install device drivers for these classes: ” as you will need to add these two GUIDs to the GPO. If you have any questions, let me know and I’ll try to assist you the best I can.

Partial credit to Chad_Anderson over on the TechNet forums. [ SOURCE ]

3 thoughts on “Windows: Allow non-admin users to install printers & printer drivers

  1. Richard says:

    In my test lab, I tried the GPO to allow non-admin users to install printers, drivers, etc. I followed the instructions to the T. Then when I confirmed that the policy applied to the computer, my non-admin user went to the HP website and downloaded the software needed to install this printer… HP OfficeJet 4620. The install asked for elevated rights and upon saying ‘No’ it ultimately failed. What am I missing?

    • travis says:

      This is the exact same problem I encountered. What you’re missing is that you’d have to allow that application through UAC (so it would have to be installed through the system user). This method (that I posted about above) allows the ini and associated files to be installed, such as off a centralized print server, without needing elevated rights.

Leave a Reply

Your email address will not be published. Required fields are marked *