Hi Matěj Vajnar Vajny.cz,
Thank you for posting in the Microsoft Community Forums.
In the Group Policy Editor, select New Group Policy to connect to the user group you want to deny automatic scanning of printers. Then navigate to:
Group Policy > Administrative Templates > Control Panel > Printers.
Then turn off the relevant options in the right-hand window, e.g. "Block adding printers".
Once the above configuration is complete, the Add Printer button will be removed from the Devices and Printers window, but this will not completely prevent users from adding printers. Users can still add printers in other ways (e.g. by installing the driver manually or using other tools).
After applying the Group Policy changes, make sure that the policy updates are applied to the target computer or user group.
Test that the changes work as expected, i.e. check that users can no longer automatically add network printers.
Best regards
Neuvi Jiang