Windows 7/XP Install Printer Without Being Local Administrator

If you run a “locked down” group policy model and need users to add new network and local printers to their machine without being Local Administrators you will need to configure the below group policy. 

This will stop the  UAC Box in Windows 7 coming up and asking to administrator permissions to run “C:\windows\system32\NtPrint.exe”. This can be applied through a domain controller via a networked group policy or locally using gpedit.msc

In Windows XP this setting is configured in

User Configuration -> Administrative Templates -> Control Panel -> Printers

However in Windows 7 this setting is configured in

Computer Configuration -> Policies -> Administrative Templates -> Printers : Point and Print Restrictions

N.B. If you want to deploy the below group policy you will need to have your Domain Controllers up to the 2008 R2 Schema or use this tool to Modify the Windows 7 Policy

http://blogs.technet.com/b/iftekhar/archive/2009/08/13/remote-server-admin-tools-rsat-for-windows-7-now-available.aspx

You need to set Point and Print Restrictions to DISABLED