Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a small computer lab set up. It is half Mac and half Windows. On the Macs, I am using the built-in parental controls to stop users from changing printing preferences. However, on the Windows machines, users (for whatever reason) keep trying to add network printers. Unfortunately, there are other printers on the network that are only for staff. Is there a way (using built-in or third-party software) to require the user to input an administrator password before adding/removing printers?

share|improve this question
This can be handled by a domain policy. – Ramhound May 7 '13 at 15:56

On the workstations (or on the domain controller if there is one) you will need to change this Group Policy:

User Configuration--> Administrative Templates --> Control Panel --> Printers --> Prevent addition of printers --> Enable

This is what it does. Keep in mind that it does not prevent them from craftily using PowerShell or NET USE to add the printer.

Prevents users from using familiar methods to add local and network printers.

This setting removes the Add Printer option from the Start menu. (To find the Add Printer option, click Start, click Printers, and then click Add Printer.) This setting also removes Add Printer from the Printers folder in Control Panel.

Also, users cannot add printers by dragging a printer icon into the Printers folder. If they try, a message appears explaining that the setting prevents the action.

However, this setting does not prevent users from using the Add Hardware Wizard to add a printer. Nor does it prevent users from running other programs to add printers.

This setting does not delete printers that users have already added. However, if users have not added a printer when this setting is applied, they cannot print.

Note: You can use printer permissions to restrict the use of printers without specifying a setting. In the Printers folder, right-click a printer, click Properties, and then click the Security tab.

If this policy is disabled, or not configured, users can add printers using the methods described above.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .