Friday, April 26

This is a very handy GPO that you can implement on your network to allow non-admin users to manage printers. This is great, especially if your users move around a bit or, like, in my company, users have laptops that they take home and can work from home. My users need to be able to install printers and manage them without administrator access.Here’s what you do.

Create a new GPO and call it whatever you’d like. Remember: it’s bad practice to use the “Default Domain Policy”. Apply the following settings:


Computer Configuration (Enabled) > Policies > Windows Settings >Security Settings >Local Policies/Security Options > Devices
Devices: Prevent users from installing printer driversDisabled


Point and Print RestrictionsEnabled
Users can only point and print to these servers:Disabled
Enter fully qualified server names separated by semicolons
Users can only point and print to machines in their forestDisabled
Security Prompts:
When installing drivers for a new connection:Do not show warning or elevation prompt
When updating drivers for an existing connection:Do not show warning or elevation prompt
This setting only applies to:
Windows Vista and later


System/Driver Installation
Allow non-administrators to install drivers for these device setup classesEnabled
To create a list of device classes, click Show. In the Show Contents dialog box, in the Value column,
type a GUID that represents a device setup class
(for example, {25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}).


This will allow non-admin users to install and manage printers on computers without admin access. Pay close attention to ” Allow Users to install device drivers for these classes: ” as you will need to add these two GUIDs to the GPO. If you have any questions, let me know and I’ll try to assist you the best I can.

Partial credit to Chad_Anderson over on the TechNet forums. [ SOURCE ]


About Author

Hi! I'm Travis and I love technology.


  1. In my test lab, I tried the GPO to allow non-admin users to install printers, drivers, etc. I followed the instructions to the T. Then when I confirmed that the policy applied to the computer, my non-admin user went to the HP website and downloaded the software needed to install this printer… HP OfficeJet 4620. The install asked for elevated rights and upon saying ‘No’ it ultimately failed. What am I missing?

    • This is the exact same problem I encountered. What you’re missing is that you’d have to allow that application through UAC (so it would have to be installed through the system user). This method (that I posted about above) allows the ini and associated files to be installed, such as off a centralized print server, without needing elevated rights.

  2. Pingback: Allow non-admins to install printers | Mualim Sharing Knowledge

Leave A Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.