In setting up a print server (Microsoft Windows Server 2008 R2) I found that a Domain User is able to create a standard TCP/IP port when adding a "local" printer, the local printer being on the network but connected to using the IP address of the printer.
I thought that a user had to be in the domain administrators group to add a standard TCP/IP port. Has this changed? Is there a policy setting that can be modified?
I want domain users to print to my network printers via my print server. I don't want them printing directly to my network printers.
Client machines are Windows 7.