Printer installation and user rights

I'm configuring a number of laptops with XP Pro for users who will be mostly out of the office to do their work. I want them to be able to add a local printer so they can print documents wherever they may happen to be. However, I don't want them to be able to install whatever casino games and spyware they want to on their machines. If I knew what printer(s) they would use in the course of working, it would be a breeze. But of course, I don't. What I would really like is something that would make it so someone in the Users group could install a printer, but I haven't found anything that suggests that it's possible to do it that way.
I've been thinking of just adding them to a less restrictive group and then working backwards to remove permissions, but if they're clever, they could probably get around some of those.

Any suggestions for how to let them have Administrator-like rights over printers but nothing else?