RE: Printing Errors

From: Shilpa Sinha [MSFT] (v-shilsi_at_online.microsoft.com)
Date: 07/27/04 

Date: Tue, 27 Jul 2004 04:21:21 GMT

Hi

Maybe this will help

Permission Error Messages Occur When Printing with the Guest Account

SYMPTOMS
========
When you are working on a computer that is running Windows, if you attempt
to connect to a printer on another Windows computer that is part of a
workgroup or a member of an untrusted domain, you may receive the following
error message:
        You do not have sufficient access to your machine to connect to the
selected printer.
This message occurs regardless of the guest account that is being enabled
or disabled on the local computer.

In addition, when you log on to the client locally and install the printer,
when you print a file, you may receive an error message when the print job
is spooling. The system event log on the print server reports the following
message:
        Event ID: 45
        Document failed to print due to GDI/Driver error in rendering.

CAUSE
=====
This issue may occur if you do not have proper NTFS permissions on the
Spool folder. By default, Windows sets stricter permissions on the Spool
folder.

NOTE: This issue does not occur when you give the Everyone group Full
Control permissions (the default NTFS permissions) on the Spool folder in
Microsoft Windows NT 4.0.

RESOLUTION
=========
To resolve this issue, use any of the following methods:

Method One
        1. Enable the guest account on the computer that is hosting the shared
printer.
        2. On the %SystemRoot%\System32\Spool folder, grant the Everyone group
Read and Execute, Read, and List Folder Contents permissions.
        3. On the client computer, log on as the user and add the printer.

Method Two
        1. Enable the guest account on the computer that is hosting the shared
printer.
        2. Add the guest account to the NTFS permissions list on the
%SystemRoot%\System32\Spool folder, and then grant the guest account Read
and Execute, Read, and List Folder Contents permissions.
        3. On the client computer, log on as the user and add the printer.

Method Three
        1. Enable the guest account on the computer that is hosting the shared
printer.
        2. Add the guest account to the NTFS permission list on the
%SystemRoot%\System32\Spool folder, and give this account Full Control
permissions.
        3. Log on to the client station as a local administrator and install the
printer driver locally by adding the printer as a network printer.
        4. Log off of the client station as the local administrator, log on as the
user, and then add the printer again.

NOTE: This method may create a security issue. When you grant the guest
account Full Control permissions, any user is able to manage other users'
documents in the print queue.

Method Four
        1. Log on to the client station as the local administrator and add the
printer.
        2. On the print server, right-click the printer, click Properties, and
then click the Advanced tab.
        3. Click the Print directly to the printer check box. When you enable this
option, the print spooling function is bypassed.

For additional information about NTFS Default Permissions, click the
article numbers below to view the articles in the Microsoft Knowledge Base:
        244600 - Default NTFS Permissions in Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;EN-US;244600
        148437 - Default NTFS Permissions in Windows NT
http://support.microsoft.com/default.aspx?scid=kb;EN-US;148437

The information in this article applies to:
                o Microsoft Windows 2000 Server
                o Microsoft Windows 2000 Advanced Server
                o Microsoft Windows 2000 Professional

Reference Link:
==============
http://support.microsoft.com/default.aspx?scid=kb;en-us;271901&Product=win20
00

Shilpa Sinha
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • Re: HELP 911!!! i cant save to or delete from my D: drive
    ... get an error message, please quote it verbatim. ... Error deleteing file or folder ... Cannot delete aol: Access denied ... It could be an issue of ownership and permissions. ...
    (microsoft.public.windowsxp.general)
  • Re: securing files in a public PC
    ... the OP has already selected an "internet cafe" ... >> In Windows 2000 the guest account does not have a permanent profile ... >> users/application data folder and subfolders. ... >> that have permissions for guests/guest/everyone user/groups. ...
    (microsoft.public.win2000.security)
  • Re: Directory Permissions - What gives?
    ... OK I can agree with that and "I stand corrected" on the guest account. ... Authenticated Users groups. ... If you had the parent folder shared at Everyone=FULL or even better ... permissions from the parent folder and add Group B and have inheritance ...
    (microsoft.public.windows.server.general)
  • Re: local users and groups
    ... following error message occurs; "access to the \\servername has been ... group on the AD and the domain users group is in the users group of the ... If you look at the actual folder that is shared on server3, right click the folder name, choose properties, then choose Sharing tab. ... What groups/users do you see in there, and what are their share permissions? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Open Remote executable?
    ... the security of the document and settings folder see if your account has the ... proper permissions. ... A specific error message, worded the way it ...
    (microsoft.public.windowsxp.general)
Quantcast