Windows printing technician providing live chat help

Joe B.

Reviewed for technical accuracy

Specialities: Windows 11/10, Group Policy, Intune, Printers, Networking, Office Equipment

Fix “Printer requires admin rights” on Windows 10/Windows 11 — Point and Print policies, UAC, driver permissions

Technician avatar Technician
Hi! We’ll remove the admin rights required to install a printer prompt and allow users to add network or USB printers safely. Tell me: Windows 10 or 11? Home/Pro/Enterprise? Domain with GPO/Intune or standalone PC? Also share the exact message like “You do not have sufficient privileges to install printer drivers” or “Printer requires admin rights”.
Customer
Windows 11 Pro laptops in a small domain. Users get Printer requires admin rights when adding an Epson network printer shared from a server. It started after updates.
Technician avatar Technician
Understood. Since Microsoft hardened Point and Print restrictions (Windows security updates), non‑admin users can’t install or update package‑aware printer drivers from arbitrary servers. Typical causes:
• GPO Point and Print settings require elevation or block new drivers.
• UAC policy forces admin approval for driver installation.
• Print server not marked as a trusted print server.
• Old Type 3 non‑package drivers or unsigned drivers.
We’ll configure policy to allow non‑admin printer installation from trusted servers and refresh the Print Spooler.
Customer
Where do I change the Point and Print restrictions in Group Policy?
Technician avatar Technician
Allow non‑admin users to add printers via GPO (Windows 10/11):
1) Open gpedit.msc (local) or Group Policy Management (domain).
2) Go to Computer Configuration → Administrative Templates → Printers and set:
  • Point and Print Restrictions = Enabled → Users can only point and print to these servers → add your trusted print server FQDNs. Set both prompts to Do not show warning or elevation prompt for approved servers (keep prompts for others).
3) Also set Package Point and Print — Approved servers and list the same trusted servers.
4) Run gpupdate /force or reboot; then reconnect the shared printer.
Customer
Does UAC affect this? Users still see an elevation popup even after adding approved servers.
Technician avatar Technician
UAC & driver signing: ensure you deploy signed, package‑aware drivers on the print server (Type 4 or packaged Type 3). In Security Options, keep UAC enabled, but the elevation prompt should disappear for approved servers. If prompts persist, the driver is non‑packaged or differs in version; replace with a packaged driver from HP/Epson/Canon/Brother and re‑share.
Customer
What about standalone laptops (no domain)? We get “You do not have sufficient privileges to install printer drivers.”
Technician avatar Technician
Windows Home/Pro without domain: open gpedit.msc (Pro) → same Printers policies as above. If you don’t have gpedit (Home), create the equivalent registry keys under:
HKLM\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint — set TrustedServers=1, list ServerList strings with FQDNs, and set NoWarningNoElevationOnInstall=1 for trusted servers. Restart the Print Spooler or reboot.
Customer
Some users already installed a different driver version. Now they get errors when reconnecting. Any clean‑up steps?
Technician avatar Technician
Driver clean‑up & spooler reset:
• Remove the printer from Settings → Bluetooth & devices → Printers & scanners.
• Open Print Management → All Drivers and delete the conflicting driver package.
• Restart the Print Spooler service (or run net stop spooler && net start spooler).
• Reconnect the printer from the trusted server so the packaged driver is pushed cleanly.
Customer
We deploy via Intune. Can we allow non‑admin printer install with a configuration profile?
Technician avatar Technician
Microsoft Intune: create a Settings Catalog profile and set Point and Print Restrictions + Package Point and Print — Approved servers, adding your print servers. Assign to devices. Pair this with a Win32 app or PowerShell script to deploy the printer connection silently using PrintUI.dll or Add-Printer.
Customer
Is it safe to turn off Point and Print prompts completely?
Technician avatar Technician
Keep the prompts disabled only for trusted, approved servers. Do not set NoWarning/NoElevation globally; that re‑opens the hole the security updates closed. Use signed, packaged drivers, restrict to approved servers, and monitor via event logs (Microsoft-Windows-PrintService).
Customer
Can users add a local USB printer without admin rights?
Technician avatar Technician
Yes, if the driver package is pre‑staged. Use pnputil /add-driver or pnputil /add-driver *.inf /install as admin once, or deploy the OEM driver via GPO/Intune. After that, users can plug in the USB printer and Windows will install without further admin privileges.
Customer
Great — the policy change worked and users can add printers again without elevation. Thanks!
Technician avatar Technician
Summary: To fix “Printer requires admin rights” on Windows 10/11, configure Point and Print Restrictions and Package Point and Print — Approved servers, deploy signed package drivers, pre‑stage USB drivers, and reset the Print Spooler if needed. Manage via GPO or Intune for consistent, secure printer deployment. Need help? Open the chat.

Quick answer: the accepted fix

Accepted fix when Windows says “Printer requires admin rights”: set Point and Print Restrictions to allow installations from approved servers, list trusted print servers, deploy signed, package‑aware drivers, and restart the Print Spooler. For standalone PCs use local policy or registry to mirror these settings.

Error appears after Windows updates (KB security hardening)

Security updates hardened Point and Print. Old Type 3 or unsigned drivers now trigger admin approval. Replace with package drivers on the server, approve the server list, and reconnect. This preserves security while allowing non‑admin printer installation.

How to verify policy is working

Run gpresult /r to confirm GPOs applied. Add the shared printer: there should be no UAC prompt from an approved server. Check Event Viewer → Applications and Services Logs → Microsoft → Windows → PrintService for successful package installs.

Windows policy tips — remove admin prompts safely

Balance security with usability using approved servers and package drivers.

Quick path: identify error → configure Point and Print Restrictions → add Approved servers → deploy signed package drivers → gpupdate and test. Use Print Management to clean conflicting drivers. For modern fleets, push settings via Intune.

Disclaimer: This information is AI-generated and intended for general guidance only. For advice specific to your environment, please consult a verified expert on Whizz-Tech before making decisions.

Getting Started Is Easy

Ask for help, 24/7

Members enjoy round-the-clock access to 12,000+ verified Experts, including tech support, mechanics, vets, and more.

Expert will respond in minutes

We match you with an Expert who specializes in your situation. Talk, text, or chat — whichever you prefer.

Save time & money

No scheduling hassles or expensive consults. Membership can save you significant time and money each month.

FAQ

Why do users see “Printer requires admin rights”?

Windows security updates hardened Point and Print, blocking untrusted driver installs. Without approved servers and package drivers, non‑admins get UAC prompts or access denied.

How do I allow non‑admin printer installation safely?

Set Point and Print Restrictions to allow installs from a list of trusted print servers, deploy signed, packaged drivers, and keep prompts enabled for any other server.

Do I need to disable UAC?

No. Keep UAC on. Properly configured approved servers and package drivers remove the prompt without reducing security.

What if I’m on Windows Home?

Use the registry to mirror policy: set TrustedServers and ServerList under the PointAndPrint key, then restart the Print Spooler.

How can I deploy printers at scale?

Use GPO with Deployed Printers or Intune with a script (Add-Printer/PrintUI.dll) after applying the Point and Print policies.

Common admin rights errors and quick fixes
SymptomLikely causeQuick fix
Elevation prompt when connecting to print server Server not approved; non‑packaged driver Add server to Approved servers; use package driver
Access denied installing USB printer Driver not pre‑staged Pre‑stage with pnputil; deploy via GPO/Intune
Driver mismatch/loop on reconnect Old Type 3 driver in store Remove in Print Management; restart Spooler
Policy applied but still prompted Wrong FQDN; policy not refreshed Verify with gpresult; run gpupdate /force

Step‑by‑step (Windows 10/11)

  1. On the print server, install signed, package‑aware drivers for each model.
  2. Set Point and Print Restrictions and Package Point and Print — Approved servers to include your servers.
  3. Run gpupdate on clients; remove conflicting drivers; restart the Print Spooler.
  4. Reconnect printers or deploy via GPO/Intune without requiring admin rights.

Step‑by‑step (macOS)

  1. This article targets Windows policy. On macOS, admin prompts are separate from Windows GPO and typically relate to driver install privileges.
  2. Manage Mac printers via MDM profiles or local admin tools; Windows policies do not apply.

Sources

Matt Verified Icon
Matt ● replies in < 1 min
Technician Expert
⭐⭐⭐⭐⭐ Trusted by 27,000+ customers
Avatar
Alex · Expert's Assistant
5 Tech Support Specialists are online right now.