Thanks for the feedback. We were not aware that there is a security command line tool to modify /etc/authorization; we'll definitely have to look into that. As for allowing access to a lot of other things... that's why I mentioned using Workgroup Manager to lock those "other" system preferences down. As previously stated, we are aware of the hints that involved modifying /etc/cups/cupsd.conf, but..."those hints did not allow a standard way for a non-admin user to [add and] remove printers" (i.e. through the system preference).

If only Apple would allow a user or group defined option of adding and removing printers in 10.5 manageable through Workgroup Manager :-)

Thanks again for the feedback.

Well, I can't force you to leave it alone, but I would highly suggest you avoid making that specific change to authorization.
Its a pain that Apple has left so much of System Preferences at the default admin ruleset, but until they fix it, changing that one setting opens the door to a lot of other things.
If you are really worried about the user being able to add printers in "A standardized way" and doing it from the print dialog is not good enough, you can always make an alias to /System/Library/CoreServices/AddPrinter and place it on their dock. They get an easy way to make em, but not delete them. (although a link to localhost:631/printers provides an easy enough delete...)

Good luck.


---
--DH