Vista - How to Allow Standard users to install network printers

Does anybody know what the best practice for allowing standard users to
install network printers is in Windows Vista?

The reason I ask is that I'm trying to deploy Vista, and find a way to allow
Standard Users to install Network Printer being shared from our Windows 2000
Print Server. I used Package Manager (pkgmgr) to add all the currently
available drivers to the driver store, and the following GPO's:

Prevent installation of devices not described by other policy settings
Allow administrators to override Device Installation Restriction policies
Allow installation of devices using drivers that match these device setup
classes
(which is then configured to allow the Printer GUID listed in
System-Supplied Device Setup
Classes:http://msdn2.microsoft.com/en-us/library/ms791134.aspx)
Allow non-administrators to install drivers for these device setup classes
(which is then configured to allow the Printer GUID listed in
System-Supplied Device Setup
Classes:http://msdn2.microsoft.com/en-us/library/ms791134.aspx)


Unfortunately every time a standard user tries to install the printer, Vista
tries to download the following driver:
Printer Driver software installation
Microsoft Windows
"C:\Windows\system32\NtPrint.exe"
PSetupElevatedInstallDownloadedLegacyDriverW
{8FCEE422-B109-4758-9A6E-5BAB7B37996F}

However the GUID is different almost every time. I assume that I'm missing
something fairly simple, but for the life of me I can't figure out what.

Any help would be appreciated.



"Gilmore, Aran" <gilmore1@xxxxxx> wrote in message
news:FACCBCB4-8B00-47B9-B4CC-632D6B1B4ED1@xxxxxx

You need to configure the Point and Print restrictions policy at a domain
level. You can roll back the other changes you did.

http://www.microsoft.com/whdc/device...staPnPSec.mspx


--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

"Gilmore, Aran" <gilmore1@xxxxxx> wrote in message
news:62D4DB89-0845-4B64-9EBA-2D4FCC30092F@xxxxxx