Each policy is scoped to all of our workstations, but limited to members of the AD group which allows them to access a particular printer on our print server.
I use a series of login policies to add printers to the machine based on which AD user is logging in.
