I have a small computer lab set up. It is half Mac and half Windows. On the Macs, I am using the built-in parental controls to stop users from changing printing preferences. However, on the Windows machines, users (for whatever reason) keep trying to add network printers. Unfortunately, there are other printers on the network that are only for staff. Is there a way (using built-in or third-party software) to require the user to input an administrator password before adding/removing printers?
On the workstations (or on the domain controller if there is one) you will need to change this Group Policy:
This is what it does. Keep in mind that it does not prevent them from craftily using PowerShell or NET USE to add the printer.