By using the "Security" tab of a printer object you can specify who can install printers from the Portal. These assignments only apply when user installs the printer from the portal. If a user installs a printer from the portal and later you remove the everyone group and add a group that the user is not a member of, the printer will still remain on the users computer.
You can grant rights by:
If the user or computer object accessing the Portal is not assigned rights or a member of a group that is assigned rights, they will not be allowed to install the printer from the portal. When a user visits the Portal, the printer(s) are listed on the Portal regardless of whether they have rights to install the printer. When a user attempts to install a printer they have not been granted rights to install, they will receive a prompt about not having permission to install the printer. By default the"Everyone" group is added to the root company object’s "Security" tab and all children nodes are set to inherit the security settings from the "Company Security" tab, allowing all users to install all printers.
There are three recommended ways to make changes to security assignments in a "Printer Objects Security" tab:
Understanding Security Inheritance
Inherited permissions are those that are propagated to an object from a parent object (company or folder object). Inherited permissions ease the task of managing permissions and ensure consistency of security assignments among all objects with a given container (company or folder object). If the "Include Inherited Security" check box is checked on an object’s "Security" tab, the object has inherited security assignments from a parent object.