...
Make sure to substitute the name of the local administrator account above it is named something other than administrator. This also allows users to unpause printers themselves in case of a paper jam.
If your IT group uses a local administrator account called "administrator" you can use the public Landesk package named "OIT - Allow All Mac Users to control printers PUBLIC"