Re: Surely there must be a better way to do this
For printing, Have you tried setting these policies?
Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Prevent users from installing printer drivers: Disable
Computer Configuration\Policies\Administrative Templates\Printers\Point and Print Restrictions: Enabled
* When installing drivers for a new connection: Do not show warning or elevation prompt
* When updating drivers for an existing connection: Do not show warning or elevation prompt