ozjonno
asked on
Server 2008R2: Security issue when printing directly to share name (eg \\machine\printer_share_name)
1) On Workstation: Share a printer on a workstation running windows 7. Share name is \\ws\printer
2) On Server (2008 R2) as administrator: add a new printer - create a new port called \\ws\printer, then add printer etc. Test page prints OK. Share printer as \\server\printer
3) On Server as administrator from dos prompt: "copy textfile.txt \\server\printer" - textfile.txt prints OK on thw printer attached to the workstation.
4) On Server as DOMAIN USER from dos prompt: "copy textfile.txt \\server\printer" - get error message "Access is denied".
This used to work OK from server 2003.
2) On Server (2008 R2) as administrator: add a new printer - create a new port called \\ws\printer, then add printer etc. Test page prints OK. Share printer as \\server\printer
3) On Server as administrator from dos prompt: "copy textfile.txt \\server\printer" - textfile.txt prints OK on thw printer attached to the workstation.
4) On Server as DOMAIN USER from dos prompt: "copy textfile.txt \\server\printer" - get error message "Access is denied".
This used to work OK from server 2003.
ASKER
Thanks for your reply
1) Yes users have permission to print. We also added "domain users" just to be sure.
2) turning off UAC and re-booting did not help.
We though it was a problem with SMB2 and have disabled this in the registry, rebooted and
it looks like its working. Will be any bad side-effects desabling SMB2?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
We partially solved the problem ourselves.
Thanks for the points.
No problem that you rate it B, importent is that you problem is solved.
No problem that you rate it B, importent is that you problem is solved.
I don't have a system here at the moment to doublecheck my thoughts.
1) Does the Domain User have printer permission on the printers?
2) This sounds like a problem UAC, is the User Administrator on the Server? - If not can you try to disable UAC?
Hope thise thoughts help to get you to the solution.