I use similar to @jwojda but for some reason have no _ before lpadmin.

http://macmule.com/2011/07/27/how-to-allow-all-users-to-add-or-remove-printers/

Thanks guys, very helpful.

How about Time Machine Preference Pane?

I accomplish this by editing /var/db/auth.db. it allows me to give users certain access but not all. I run a script per user at login. Works like a charm.

I use the built in Apple Security commands, but you can use AuthBuddy if yoyo find it easier.

http://www.dssw.co.uk/blog/category/authbuddy/

!/bin/bash

# This script will allow non-admins to change their network, install a printer and change the timezone

# Open up parent authorization so it does not supersede child authorization
security authorizationdb write system.preferences allow

#Open Printing Preference Pane
security authorizationdb write system.preferences.printing allow

#Open Date & Time Preference Pane
security authorizationdb write system.preferences.datetime allow

#Open up parent auth for network so it does not supersede child auth
security authorizationdb write system.services.systemconfiguration.network allow

#Open Network Preference Pane
security authorizationdb write system.preferences.network allow

# Open up parent authorization so it does not supersede child authorization security authorizationdb write system.preferences allow # Open Printing Preference Pane security authorizationdb write system.preferences.printing allow

My script only includes those two lines, and it used to work for me, but not anymore.

It definitely does not work in OS X El Capitan 10.11, and maybe not in 10.10 Yosemite (but I'm not sure).

In any event, the command listed at the top does work!
dseditgroup -o edit -n /Local/Default -a everyone -t group _lpadmin