Elevate Add a Printer from Devices and Printers in Windows 7 for standard users

Issue

Standard users in Windows 7 can open the Add a Printer window from Devices and Printers, but after selecting a printer to install they get prompted by User Account Control (UAC) for Administrator credentials.

Solution

Elevate Standard Users to allow standard users to use the "Add a Printer" option from Devices and Printers without being prompted by UAC for Administrator Credentials.

Introduced in 7.1 SP3

This capability was Introduced in version 7.1 SP3.

This feature only functions on Vista, Windows 2008, Windows 7.

Elevate Standard Users by doing the following steps:

  1. In the Security Manager Console, click the Policies tab.
  2. In the file library in the left pane, navigate to Policies > Arellia Solutions > Application Control > Filters > Dynamic Filters > Commandline > System Utility Arguments.
  3. Right-click Network Adapter Elevate Attempt and click Clone.
  4. Rename the filter to Printer Elevate Attempt.
  5. Change the Command line to:

    /AdminProxy:{CEE8CCC9-4F6B-4469-A235-5A22869EEF03} {2FC8AED1-3368-4D18-993F-B869034D3372}



  6. Create a New Application Elevation Policy and name it Elevate "Add a Printer" Policy.
  7. Change the Applications to control to COMElevateHost.exe.
  8. Change the Include only to the new Printer Elevate Attempt filter.



  9. Make sure the application actions is set to Add Administrator Rights and that the Policy Enforcement Priority is set appropriately.