When I created the NDPS printer object a while back I was careful not to include the entire container, because some users shouldn't have access to that printer. The problem I was having was that a specfic user account was able to use the printer even though they weren't given "User" access to it. What I am testing right now is if changing the security level to High will help. Perhaps the medium security level does what you suggested, and allows any user in that container the ability to print to that printer, by virtue of the "trickle-down" effect.