What if the user does NOT have policies (at least iPrint) applied & it
is NOT a member of the administrators group?

What is then the point of having the "install from web" if the users can NOT
install the client? (NOTE client software, NOT the actual printer)

Seb