Devices: Prevent users from installing printer drivers

For a computer to print to a shared printer, the driver for that shared printer must be installed on the local computer. This security setting determines who is allowed to install a printer driver as part of connecting to a shared printer. If this setting is enabled, only Administrators can install a printer driver as part of connecting to a shared printer. If this setting is disabled, any user can install a printer driver as part of connecting to a shared printer.

Notes

This setting does not affect the ability to add a local printer.
This setting does not affect Administrators.

Policy path: 

Computer Configuration\Windows Settings\Local Policies\Security Options

Comments: 

For the policy change to take effect, the spooler service needs to be stopped/restarted, but the system does not have to be rebooted.

Default: 

Default on servers: Enabled. Default on workstations: Disabled

Supported on: 

At least Windows XP SP2, Windows Server 2003

Registry settings: 

MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers\AddPrinterDrivers

Reboot required: 

No

Related content