Block local admins from installing printers

Question

I have a number of users laptops that are Intune enrolled and Azure Hybrid joined. The users are local admins on their windows 10 laptops and I am trying to restrict the users from being able to install printers on their laptops for data security. I have been able to prevent the users from being able to install printers via devices and printers using a policy as well as blocking USB printer driver installation by defining an Intune policy to block USB Printers GUID.
The question I have is, is there a way that I can prevent these users from installing network/shared printers and likewise Wireless printers? basically if the user manages to get hold of the Printers software package/driver deployment package from the printer manufacturer they are able to use that to install the Wireless/network printers.

I need the users to be local admins but I also need to be able to prevent them from being able to install printers.

Answer 1

Windows security is not currently supported here on QnA. They're actively answering question in dedicated forums here.
https://social.technet.microsoft.com/Forums/en-US/home?forum=win10itprosecurity
https://answers.microsoft.com/en-us/windows/forum/windows_10-security

--please don't forget to Accept as answer if the reply is helpful--

---

Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows Server] Datacenter Management

Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.