I've been chartered to do the following at the place I'm working at. We have a locked down environment that does not allow users to add software or printers when attached to the network. The laptops are also setup the same way. What I'm trying to do is maintatin this security when they are off the network but allow one thing. Install Printers.

I know that there is a local security policy that is enabled by default that prevents users from installing the print drivers. Here is my question.

If i used the domain group policies and apply it to a group of laptops that is on the network and allow them to install printers, this gives them access to the network to install printers - We don't want that. I however do want the users to be able to install printers when they are off the network (because we cannot know every printer that these people have at home) How can this be done

Thanks!

Weyland