Tim,
This is a difficult one to control, the first thing to understand is
that the only process that requires Admin Rights for plug and play devices
is to load the associate inf adn drivers files into the driver store so the
printer will be detected. What a lot of administrators do is on build of
laptops connect and install drivers for the most common printers in use and
then remove them, which leaves the drivers in the store. When a user then
attempts to install a printer pnp picks up the drivers from store and uses
existing which then means they do not need administrator rights. This
technique is the recommended approach but requires that you can predict the
printers in use in the environment, not always practical.
The other alternative which is a security risk is to allow users to install
drivers by changing security through group policy to allow the user or users
in Question to "Load and unload device drivers". The group policy is in the
following "Computer Config\Windows Settings\Security Settings\Local
Policies\User Rights Assignment\Load and unload device drivers.
Dave Britt
