How to Allow Non-Admin Users to Add Printers in Leopard
by Dean Mattson
With Mac OS X 10.5 (Leopard), Apple added a new feature: non-admin users are no longer able to add printers without an administrator password. This has been true of Windows for quite awhile and I’m sure it’s much needed in some environments, but it would result in a lot of trouble for me. A lot of teachers at my school have their own printers at their homes and they’d like to be able to print to them with their laptops. I would like an easy way to let them do that.
So Friday I spent a lot of time searching on the internet for a way to do exactly that. It wasn’t easy. I found a lot of methods that didn’t work and a lot more that didn’t give me enough information with which I could figure out how to do it. By splicing together information from two sources, I figured out how to make it work. Here’s how to do it.
1. First you need to be logged in as an administrative user. Open Firefox and go to http://localhost:631/admin, click on “Edit Configuration File”.
2. You’re going to look for these two parts towards the bottom:
# <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default> # AuthType Default # Require user @SYSTEM # Order deny,allow # </Limit> # <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer # Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs # Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer # Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs> # AuthType Default
# Require user @AUTHKEY(system.print.admin) @admin @lpadmin # Order deny,allow # </Limit>
3. Select them and press the delete key. Click “Save Changes.”
4. Restart your computer.
From now on, any user will be able to add any printer they want.


[...] Looking Forward » How to Allow Non-Admin Users to Add Printers in Leopard (tags: osx tools) [...]
[...] Looking Forward » How to Allow Non-Admin Users to Add Printers in Leopard (tags: printing osx howto work) [...]
Thank you !!
This WORKED. Thank you. I run several labs at a school and this problem was driving everyone nuts. I tried following some other articles’ suggestions for editing the cupsd.conf file, and they either didn’t do the job or completely broke the CUPS service so that users couldn’t login to their accounts. I changed it as you suggested, except I didn’t delete the part prohibiting users from adding and deleting privileges. Helpful in a lab setting.
Great find! it seem a little bit odd but my config was a lot different then the one posted. my 10.5.6 has updated it or something. anyways….
now that I have it done I can only add printers using
/System/Library/Core Services/Addprinter
is that all or is their away to get the printer control panel function working?
I cannot get this to work. I’ve tried many variations and nothing.
There are more options listed here, but still no luck.
http://blog.macadmincorner.com/allow-non-admin-users-to-manage-printers/comment-page-1/#comment-338
Thanks for the tip (got it via macoxhints.com). Instead of deleting the lines, I added # in front to turn them into comments.
Excellent tip. Searched quite a few non descript ‘advice’ postings on the web to no avail. This one worked first time. Excellent!
If you want finer-grained control over the add printer function, then rather than deleting these sections you could instead just add “@lpadmin” to the end of the first “Require” line (it’s already at the end of the second one). Then, to grant a user permissions to administer printers, just add them to the “lpadmin” group.
Supposedly in 10.5, local and mobile users are already part of this group by default, so you may only need to make the change to the cupsd.conf file and not need to do anything with the users.
@Jason: It appears the machete is superior to the scalpel here.
According to
http://www.jaharmi.com/2009/02/21/membership_in_the_lpadmin_group_on_mac_os_x_leopard
both network and mobile users are not members of lpadmin.
According to
http://support.apple.com/kb/HT3511
one can add these user types to lpadmin, but the commands given do not result in what the description says should happen. Mostly, there’s no directory called /Local and instead of being prompted for the local account holder’s password, I am promoted for the ‘user’ indicated toward the end of the line for adding mobile users.
I’m going to try this CUPS config mod with the hope that my several dozens of mobile account Mac users can add their own printers.
This did not work for me because of this part “First you need to be logged in as an administrative user. Open Firefox and go to�http://localhost:631/admin, click on “Edit Configuration Fileâ€.�
The root problem is that I cannot log in as an administrative user in the first place.
After much difficulty, I have gotten to the point where I can give the print command but the printer repeatedly reverts to a “Paused” mode? I still cannot use this printer. Anyone have a suggestion?
FYI, this file is located at /etc/cups/cupsd.conf and can be edited directly in Terminal as an admin. It’s safer to make a backup first using:
sudo cp -p /etc/cups/cupsd.conf /etc/cups/cupsd.conf.bk
Edit it using:
sudo pico /etc/cups/cupsd.conf
You should also be able to comment out the lines rather than deleting them by prefixing each with “#”.
I’m first trying adding “@OWNER” to the “Require user” lines to see if that has the same effect.
[...] far, my most popular post has been How to Allow Non-Admin Users to Add Printers in Leopard, which accounts for about two-thirds of the traffic to this site. It address a minor problem in Mac [...]
I’ve tried every combination of the above posts: modifying cupsd.conf file and/or adding users to the lpadmin group…..nothing has worked yet. I think one of my problems is that my users are logging into the MACs using their WINDOWS Active Directory accounts….not local MAC accounts. I’m starting MAC Snow Leopard (MAC101 & MAC201) training tomorrow, so hopefully the instructor has a resolution to this problem….if so, I’ll be sure to post it here!!!
Solution from Apple:
http://support.apple.com/kb/TS2754
Log in as an administrator account.
Open Terminal, which is found in the Utilities folder, in the Applications folder.
Type this command in Terminal on a single line. Replace “(affected_username)” with the shortname of the affected user account:
dseditgroup -o edit -p -a(affected_username) -t user _lpadmin
Enter the password of the logged-in administrator account at the “Please enter user password:” prompt.
Press Return.