Microsoft made some changes to the network printing security in Windows 7 and as a result, many non-admin users are not able to install network printers with an Access Denied message.
I did some research on this today, and found a solution. We just need to make a new GPO on the domain level for each client network that is experiencing this problem. These are newer GPO extensions, so its best to create the GPO on a Windows Server 2008 R2 server. Otherwise, you’ll need to find the ADM extensions and install them on the Server 2003 system.
- Configure Group Policy settings for “Point and Print” on BOTH computer and user settings (Vista previously only had user settings). The Location of the settings can be found here in GPOs:
- Computer Configuration\Policies\Administrative Templates\Printers\Point and Print Restrictions
- User Configuration\Policies\Administrative Templates\Control Panel\Printers\Point and Print Restrictions
- You will need to specify all print servers on the network and be sure to disable all security prompts.