Employees at our company all use Standard (non-admin) accounts on macOS and install printers via Managed Software Center. By default this only gives them the ability to install and uninstall in MSC, but not manage queues or add personal printers at home in System Preferences.
Thankfully a simple command that can be run to allow standard users to have that ability has been around for years:
dseditgroup -o edit -n /Local/Default -a staff -t group lpadmin
(Variations of this script posted around the web include using everyone instead of staff and _lpadmin instead of lpadmin.)
In the past I have always enabled this feature with a payload-free package. However that didn’t present a way to confirm the setting is still active or provide an easy way to reverse it.
To solve those issues I decided to convert it to a Munki NoPkg with logic to do both.
Read on for the details: