Control Printer Driver Installation Security

Applies To: Windows 7, Windows Server 2008 R2

The default security settings for Windows 7 and Windows Server 2008 R2 allow users who are not members of the local Administrators group to install only trustworthy printer drivers, such as those provided with Windows or in digitally signed printer-driver packages. This helps to ensure that users do not install untested or unreliable printer drivers or drivers that have been modified to contain malicious code (malware). However, it means that sometimes users cannot install the appropriate driver for a shared printer, even if the driver has been tested and approved in your environment.

See "To permit users to connect only to specific print servers that you trust"


http://technet.microsoft.com/en-us/library/cc753269.aspx