Nas estações de trabalho (ou no controlador de domínio, se houver), você precisará alterar esta Política de Grupo:
User Configuration--> Administrative Templates --> Control Panel --> Printers --> Prevent addition of printers --> Enable
Isso é o que faz. Lembre-se de que isso não impede que eles usem habilmente o PowerShell ou o NET USE para adicionar a impressora.
Prevents users from using familiar methods to add local and network printers.
This setting removes the Add Printer option from the Start menu. (To find the Add Printer option, click Start, click Printers, and then click Add Printer.) This setting also removes Add Printer from the Printers folder in Control Panel.
Also, users cannot add printers by dragging a printer icon into the Printers folder. If they try, a message appears explaining that the setting prevents the action.
However, this setting does not prevent users from using the Add Hardware Wizard to add a printer. Nor does it prevent users from running other programs to add printers.
This setting does not delete printers that users have already added. However, if users have not added a printer when this setting is applied, they cannot print.
Note: You can use printer permissions to restrict the use of printers without specifying a setting. In the Printers folder, right-click a printer, click Properties, and then click the Security tab.
If this policy is disabled, or not configured, users can add printers using the methods described above.