Solved

Server 2008 Printing thru rdp not working.

Posted on 2016-07-28
21
147 Views
Last Modified: 2016-08-30
Hello experts,
I have a client with a Server 2008 R2 Datacenter.   It is not a DC, workgroup only.
Have RDS server with 15 licenses - user cals.  
I know that it will not report or track user cals in a workgroup environment.
But what I do not know is if that will keep me from printing remotely but I don't think that is it.

When a user logs in, all their local printers show up fine as redirected with TS ports as they should.
I have gone into GP and changed the setting to disable "use easy print drive first".
RDP user machines are window 8, 8.1 or 10 -  x64.
When they print it spools and disappears.  The error is in  event viewer under print service.
This is the error:
The document Test Page, owned by USERNAME, failed to print on printer RJHP277 (HP Color LaserJet MFP M277dw) (redirected 24). Try to print the document again, or restart the print spooler.
Data type: RAW. Size of the spool file in bytes: 143175. Number of bytes printed: 0. Total number of pages in the document: 1. Number of pages printed: 0. Client computer: \\namehere. Win32 error code returned by the print processor: 5. Access is denied.
Found this:
https://www.experts-exchange.com/questions/24795160/Event-ID-6161-Win32-error-code-returned-by-the-print-processor-5-Access-is-denied-Source-Microsoft-Windows-PrintSpooler.html

So I changed permissions to allow access to c:\windows\system32\spool - .  but had following errors when trying to give all users full control.
"An error occurred while applying security information to:
c:\windows\system32\spool\prtprocs...\LXKPTPRC.dll.mui.  Access is denied"
Next is:
"An error occurred while applying security information to:
c:\windows\system32\spool\prtprocs\x64\winprint.dll.  Access is denied"
Next:
"An error occurred while applying security information to:
c:\windows\system32\spool\tools.  Access is denied"
I continued on though and did another test print.  Had the same error.
I am an administrator on the system.
I am able to create a file (.txt) in the spool folder and then delete it.  I did not try another folders below that.
I don't know whether to chase the issue with the permissions on the spool folder or something else.
Any help will be most appreciated.
0
Comment
Question by:4rg
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
21 Comments
 
LVL 41

Expert Comment

by:Adam Brown
ID: 41733862
Install the printers on the server itself and disable printer redirection. The redirect is probably failing due to the computers or local users on the computers having inadequate permission to print.
0
 
LVL 1

Author Comment

by:4rg
ID: 41736023
Hi Adam,
Thank you for your time.
I forgot to mention in my original post that I actually tried that and it did not work.  
As mentioned earlier, I am an administrator so permissions should not be an issue, right?
Since I posted the question, I have uninstalled the Print Services Role (it was the only piece installed of that role) and restarted the server, then reinstalled.  Still experiencing the same problem.
Any other thoughts?
J
0
 
LVL 23

Expert Comment

by:yo_bee
ID: 41753896
I know this has nothing to do with the topic, but Datacenter version of the OS for a Workgroup setup.
Seems a bit overkill and expensive if you are not deploying a large number of servers.
0
Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

 
LVL 15

Expert Comment

by:joharder
ID: 41753969
Can you go in and remove the policy to remove the use of the easy print driver?  If the printers are mapping correctly into the user session, your printing issue could be related to not having a printer driver available for the print job.  If that's successful, and you don't wish to use that driver, you'll need to enable the installation of printer drivers so that print jobs have drivers.

If that works, then you should also remove the permissions change you made to the c:\windows\system32\spool folder.  There should be no reason to modify permissions on this folder.
0
 
LVL 1

Author Comment

by:4rg
ID: 41757094
Everyone, thanks for looking at this.

To Yo-bee: I realize the Datacenter version is extreme overkill but the client installed this themselves.  Have bigger fish to fry at the moment though than to criticize their choices, you know?  Thank you for the input though.

To joharder:  I had changed the policy to remove the use of easy print drivers when I installed my own drivers.  That was part of that test for me.  Failed miserably.  I always get access denied error 372.  I have noticed today that there I am low on ram, Physical Memory Usage History is pegged at 14.2gb out of 15gb and there is a message in the Google cloud console that this server is over utilized.  Can lack of ram prevent printing?  I had never heard of that.
J
0
 
LVL 15

Expert Comment

by:joharder
ID: 41757123
Did you reboot and/or reapply GPOs after making changes to the printer GPO?

Is your print spooler service failing as well?

If you do a printui /s, what does it show as the installed drivers on the server?  What about on the client devices?
0
 
LVL 1

Author Comment

by:4rg
ID: 41758397
I did reapply GPOs after making changes to the printer GPO.
I also rebooted.
My print spooler service is not failing though I restart it manually after every failure test.

My drivers are installed on both the server and the client.  
I ran the command as you asked though and it just opened the  Print Server properties and shows the same drivers as found in Server Manager - Print and Document Services - Print Management - Print Servers - Instance name - Drivers area.  
Not sure what you were looking for by running the command line, am I missing something here?

To be clear, here is the exact message I have after enabling the administrator account (my client had disabled it for security reasons/best practices) and logging in as the original administrator account and trying to print.
The document Test Page, owned by Administrator, failed to print on printer RJHP277 (HP Color LaserJet MFP M277dw) (redirected 28). Try to print the document again, or restart the print spooler.
Data type: RAW. Size of the spool file in bytes: 143189. Number of bytes printed: 0. Total number of pages in the document: 1. Number of pages printed: 0. Client computer: \\myservername. Win32 error code returned by the print processor: 5. Access is denied.
0
 
LVL 15

Expert Comment

by:joharder
ID: 41758443
Rather than trying to give users full control of the C:\Windows\System32\Spool folder, just give them read and write access.  According to this MS article, that should fix it.
0
 
LVL 1

Author Comment

by:4rg
ID: 41758569
Something strange I want to mention, I noticed it before but spoke with a friend (network engineer) and they said it would not cause this issue.  The RD Licensing Manager does not show any Issued licenses.  Though it does show 10 and 5 RDS per user cals installed respectively.  There are 25 users logged in and working though.  I have read that you cannot use RDS per user cals in a workgroup environment, they must be per device cals.  Could this be causing my no printing issue do you think?
0
 
LVL 1

Author Comment

by:4rg
ID: 41758576
Oh, and I changed permissions and removed full control, still left write access, no help.
0
 
LVL 15

Accepted Solution

by:
joharder earned 500 total points
ID: 41758603
Not likely.  If you didn't have RDS CALs, users wouldn't even be able to connect.  

Are you still in the 120-day RDS grace period?  If so, that may be why the per-user RDS CALs are working in a workgroup environment.

In reviewing everything, I still think that this is related to printer drivers, not RDS licensing.  It sure sounds like the print job begins to spool and then a printer driver issue and/or related permissions issue causes it to fail.

What is the level of User Account Control set on this server?
0
 
LVL 1

Author Comment

by:4rg
ID: 41760957
Hi Joharder,
We are not in the 120 day grace period.

The UAC for my account is never notify.  I did not change it.

I understand your thinking but after installing my driver locally and using easy print as default and not using easy print as default and it not working still, I don't know where to go with this.  
BTW, I can print to a pdf writer, they have cutepdf installed and it works.  Then I can send the pdf to myself and print it locally.  That has been their work around.  Does that information help you at all?   Since I don't understand the differences between the two it does not help me.

Thanks again, really appreciate it.
0
 
LVL 15

Expert Comment

by:joharder
ID: 41763145
Can you post a screen shot of the print drivers installed on a local device and the print drivers installed on the server?
0
 
LVL 1

Author Comment

by:4rg
ID: 41763664
Sure, thanks.  
As mentioned earlier I did locally install (to the server) the default printer driver from my local computer.
local-drivers1.jpg
local-drivers2.jpg
Server-drivers.JPG
0
 
LVL 15

Expert Comment

by:joharder
ID: 41765849
A few questions:
 - Can you verify that the PDF Factory5 NT x86 driver is not a kernel driver?
 - Are you properly licensed for PDF Factory5 on the server (i.e., is it the $60 license)?  If not, remove both PDF Factory5 drivers.
 - Is the MFP M277 driver on the server the PCL6 version?
 - On the client device, can you add one of the printer drivers that is already on the server, e.g., HP DeskJet F4400 and try printing.
0
 
LVL 1

Author Comment

by:4rg
ID: 41766016
I don't care about the PDF drivers as they work.
The MFP M277 driver is the PCL6 version, that is mine.  I installed it to the server as one of the first things I did.
It is installed on the client device, same driver.  It does not print.
0
 
LVL 15

Expert Comment

by:joharder
ID: 41766076
You have two PDF drivers, CutePDF and PDF Factory.  CutePDF is freeware and widely used, whereas PDF Factory is not.  Of all the drivers on the list, PDF Factory would be suspect as it is the only Windows NT x86 driver.  In addition, if it's not licensed properly, it could be causing the issue.

Please try removing the PDF Factory drivers and rebooting.
0
 
LVL 1

Author Comment

by:4rg
ID: 41774028
Well, this problem was there prior to them purchasing the pdf factory license and yes purchased.
I am out of ideas.
0
 
LVL 1

Author Comment

by:4rg
ID: 41776099
I am closing this ticket and giving the points to joharder for helping me and sticking with me.  Though I don't want to mark anything as best solution as there has been no solution.  Maybe the things we tried will help someone else.
Thanks Joharder.
0
 
LVL 1

Author Closing Comment

by:4rg
ID: 41776102
I think someone messed with the users and groups on this server and it is beyond repair.
0

Featured Post

Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Like many organizations, your foray into cloud computing may have started with an ancillary or security service, like email spam and virus protection. For some, the first or second step into the cloud was moving email off-premise. For others, a clou…
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question