Printer shared on 2008 R2, user gets access is denied on XP

Posted on 2011-10-05
Last Modified: 2012-05-12
I setup a Windows 2008 R2 (Std) as a print server.  I have setup multiple printers to be shared on it.  One HP is giving me issues.  I have it shared and when the user connects (validated her share permissions) she sees cannot connect, access is denied.  She can connect fine to another printer shared on the same server, no problem.  
Question by:ehess

    Expert Comment

    Have you installed the x86 drivers on the 2008 R2 printserver (under the sharing - additional drivers tab)?

    In the printer properties, are the groups and usernames on the security tab the same as the other printers?

    If she browses the root of the print server from her workstation (Start, Run, type: \\printservername) can she see the printer she wants to connect to? If she double clicks the printer, does it install?

    LVL 24

    Expert Comment

    Hi, access denied may mean that the user/users do not have enough permissions to print. So do the users that are having problems have something in common e.g. belonging to a certain group. Can an admin log onto one of the XP machines and print? If so then it has to be a group policy from the server side.

    On your Print Server,
    Select the printer the user can’t access: properties>security settings and add the name of the domain user who can’t access the device and apply.

    Go to start, all programs, administrative tools
    Select "User Rights Assignment"
    Double click on "Access this computer from the network". Click on "Add User or Group". Type "everyone" and then click on "Check Names". Select "everyone" and click ok.

    On the XP computer with the problem - Logon using the users credentials who has the “Access Denied” message. Delete only the printer that cannot access the server.

    Logoff and Logon as the same user and you should be able add this printer.

    Also Turn on DEP for essential Windows programs and services only.
    1. Go to Control Panel
    2. Maintenance and Performance
    3. Click System Icon
    4. Advanced
    5. Performance under Settings
    6. Performance Options---->Data Execution Prevention
    7. Choose ----> Turn on DEP for essential Windows programs and services only.
    8. Click Apply and OK.

    Also check the group policy setting from server if above does not work.

    LVL 1

    Author Comment

    I have already installed the 32 bit drivers on the 64 bit 2008 server.  I'll try Sandeshdubey suggestions today.
    LVL 1

    Author Comment

    The Server 2008 R2 doesn't have User Rights Assignment in Administrator Tools.  The server is part of a domain and I don't know if that is the reason or if it's a role or feature that I need to enable.  I checked both the roles and features and didn't see anything regarding User Rights.  I had a Group Policy for the user in place which assigned the printer to her user account and the computer.  I validated the GP applied, but it still failed.  This is what it said.  

    User Config\Preferences\Control Panel Settings\Printers\TCP/IP Printer\IP of printer\
    The following settings have applied to this object.  Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.  
    IP of Printer
    Winning GPO - GPO with printer assignment
    Result: Failure (Error Code: 0x80070706)

    I then deleted the GPO and tried to manually add the shared printer for the user.  Still same issue, access is denied.  

    I changed the security on the printer share to everyone full control and still the user gets access is denied.  

    I tried another user on a different XP computer (non admin user) and connected successfully to the printer.  

    Not sure what to try next.  

    It's only the HP printer causing issues, the user has a Xerox printer added through another GPO that works successfully.  

    I added the GPO back.

    I found this and made sure the GPO had "Run in logged-on user's security context" in the "Common" tab checked.  Still no difference, even if the user was targeted.  
    LVL 24

    Expert Comment

    You will get User rights Assigment setting in control pannel==>administrative tools==>Local Security setting==>Local Policies==>User Rights Assigment.

    Also try below setting:
    1. Enable the guest account on the server or PC where Printer is connected
    2. Add the guest account. Go to start, all programs, administrative tools
    3. Select "User Rights Assignment"
    4. Double click on "Access this computer from the network". Click on "Add User or Group". Type "guest" and then click on "Check Names". Select "guest" and click ok.
    5. Double click on "Deny access to this computer from the network", and remove the guest account from it.
    LVL 1

    Author Comment

    Everyone and Authenticated Users are already allowed.  I will not add a guest to the Domain Controller, which is hosting the printer.  
    LVL 24

    Expert Comment

    If it is as DC then don't add guest account.
    LVL 1

    Accepted Solution

    I made sure DEP was enabled on the XP machine for essential Windows programs and services, it was.  
    There was no unique firewall setting on the XP machine.  
    A static IP address was assigned to both the print server and the PC, for other purposes.  

    I finally gave in and just added the printer locally on the XP machine using the TCP IP port.  When I added the driver it would fail if I kept the current driver, but worked successfully if I used the new driver I had downloaded from HP.  
    FYI...the new print server had the latest HP drivers (both x86 & 64), but the XP machine was still accessing the OLD print server shared printer so it had the old driver loaded.  
    LVL 1

    Author Closing Comment

    It was a work around, not a complete solution.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
    You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

    731 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now