I never said anything about printer drivers. I'm talking about the actual network printer connection. If the user has rights to add a network printer they should be able to remove it as well. All my users are part of the Domain Users group, that's it. They are not part of any local groups on the Windows 7 client computers. The more rights they have the more things get screwed up.

so how are the users getting the printer drivers then? If you are connecting to a network printer they have to get the drivers somehow...when we connect here if the printer hasn't been set up before it loads drivers, then we must enter our credentials....if the user is just connecting to the printer they don't have to enter in any credentials if the driver is already loaded on their machine.

If it's a printer make/model the user has never connected to before, Windows installs the drivers with no questions asked. This was accomplished by setting group policies so users are not asked for credentials when installing a network printer or its drivers. Works great. The problem is normal users (non-local admins) cannot remove the printer if they no longer need it.

http://social.technet.microsoft.com/Forums/en-AU/itprovistaprinting/thread/e907e7e0-99fd-4f35-bedb-c058558aab78 take a look here, seems to be kind of what you are experiencing...What exactly did you change in the GPO to allow for the printer to be installed?

First I ran into a problem where a normal user could not add a network printer in Windows 7 without entering elevated credentials. I resolved that with some group policy settings. Now that same user who had rights to add the printer can't delete it, unless they are a local admin, which I don't want them to be. How do you resolve this?

I say its good policy to not let them delete a printer driver...or add one...We set up all printer drivers here for users because we want to make sure they are printing in desiginated areas. If you let users delete a printer driver I think you will allow more headaches from accidental deletions. with that being said...what account do you set users up as on the windows 7 machine? Power User?

I never said anything about printer drivers. I'm talking about the actual network printer connection. If the user has rights to add a network printer they should be able to remove it as well. All my users are part of the Domain Users group, that's it. They are not part of any local groups on the Windows 7 client computers. The more rights they have the more things get screwed up.

I will browse through the thread you provided, thanks. The GPO's I changed to allow normal users (Domain Users) to add a network printer without being prompted for credentials are: Computer > Policies > Administrative Templates > Printers > Point and Print Restrictions. I Enabled this setting and fed it all my print servers using FQDN's. I also set to "Do not show warning or elevation prompt" and "Show warning only". User > Policies > Administrative Templates > Control Panel > Printers > Point and Print Restrictions. I Enabled this setting and fed it all my print servers using FQDN's. I also set to "Do not show warning or elevation prompt" and "Show warning only".

sorry we got AD 2003 here I can't see the same settings you have

so how are the users getting the printer drivers then? If you are connecting to a network printer they have to get the drivers somehow...when we connect here if the printer hasn't been set up before it loads drivers, then we must enter our credentials....if the user is just connecting to the printer they don't have to enter in any credentials if the driver is already loaded on their machine.

If it's a printer make/model the user has never connected to before, Windows installs the drivers with no questions asked. This was accomplished by setting group policies so users are not asked for credentials when installing a network printer or its drivers. Works great. The problem is normal users (non-local admins) cannot remove the printer if they no longer need it.

http://social.technet.microsoft.com/Forums/en-AU/itprovistaprinting/thread/e907e7e0-99fd-4f35-bedb-c058558aab78 take a look here, seems to be kind of what you are experiencing...What exactly did you change in the GPO to allow for the printer to be installed?

I will browse through the thread you provided, thanks. The GPO's I changed to allow normal users (Domain Users) to add a network printer without being prompted for credentials are: Computer > Policies > Administrative Templates > Printers > Point and Print Restrictions. I Enabled this setting and fed it all my print servers using FQDN's. I also set to "Do not show warning or elevation prompt" and "Show warning only". User > Policies > Administrative Templates > Control Panel > Printers > Point and Print Restrictions. I Enabled this setting and fed it all my print servers using FQDN's. I also set to "Do not show warning or elevation prompt" and "Show warning only".

sorry we got AD 2003 here I can't see the same settings you have

Hi, You may have a try to delete the network printers via registry. I think it relates to the permission of your domain user. Windows XP Remove Any Network Printer via Registry Editor http://www.tech-recipes.com/rx/2855/windows_xp_remove_any_network_printer_via_registry_editor/ Hope that helps.Ivan-Liu TechNet Community Support

This is only an issue for Windows 7 users. Windows XP users are able to delete network printers with no errors.

Try using this policy "Point and Print Restrictions" http://blogs.msdn.com/b/7/archive/2011/07/11/allowing-standard-users-to-install-network-printers-on-windows-7-without-prompting-for-administrative-credentials.aspx

Hi, You may have a try to delete the network printers via registry. I think it relates to the permission of your domain user. Windows XP Remove Any Network Printer via Registry Editor http://www.tech-recipes.com/rx/2855/windows_xp_remove_any_network_printer_via_registry_editor/ Hope that helps.Ivan-Liu TechNet Community Support

Uhhh Brano, had you read the problem, it is not with adding printers, it is with deleting printers.

This is only an issue for Windows 7 users. Windows XP users are able to delete network printers with no errors.

Try using this policy "Point and Print Restrictions" http://blogs.msdn.com/b/7/archive/2011/07/11/allowing-standard-users-to-install-network-printers-on-windows-7-without-prompting-for-administrative-credentials.aspx

Uhhh Brano, had you read the problem, it is not with adding printers, it is with deleting printers.