Printing via RDP from W2K8 access denied error

[Roger Vicker]

Environment: single W2K8 server domain (no other server of any size, function
or flavor) and users on XP over a WAN.

The users can connect, work and see their local printers redirected in RDP.
However whenever they print nothing ever arrives at their local printer. The
server's event log shows an 6161 event.

The document Test Page, owned by it, failed to print on printer USERSPRT
(redirected 3). Try to print the document again, or restart the print
spooler.
Data type: RAW. Size of the spool file in bytes: 135341. Number of bytes
printed: 0. Total number of pages in the document: 1. Number of pages
printed: 0. Client computer: \\RDPSERVER01. Win32 error code returned by the
print processor: 5. Access is denied.

Log Name: System
Source: Microsoft-Windows-PrintSpooler
Date: 10/11/2008 8:05:59 PM
Event ID: 6161
Task Category: None
Level: Error
Keywords: Classic
User: RDPDOMAIN\it
Computer: RDPSERVER01.RDPDOMAIN.local
Description:
The document Test Page, owned by it, failed to print on printer USERSPRT
(redirected 3). Try to print the document again, or restart the print
spooler.
Data type: RAW. Size of the spool file in bytes: 135085. Number of bytes
printed: 0. Total number of pages in the document: 1. Number of pages
printed: 0. Client computer: \\RDPSERVER01. Win32 error code returned by the
print processor: 5. Access is denied.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-PrintSpooler"
Guid="{e4c60dfa-ecc5-4889-b406-e9ddd38463c8}" EventSourceName="Print" />
<EventID Qualifiers="49152">6161</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-10-12T01:05:59.000Z" />
<EventRecordID>13799</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>RDPSERVER01.RDPDOMAIN.local</Computer>
<Security UserID="S-1-5-21-937972965-681441152-3252368214-1139" />
</System>
<EventData>
<Data Name="param1">Test Page</Data>
<Data Name="param2">it</Data>
<Data Name="param3">USERSPRT (redirected 3)</Data>
<Data Name="param4">RAW</Data>
<Data Name="param5">135085</Data>
<Data Name="param6">0</Data>
<Data Name="param7">1</Data>
<Data Name="param8">0</Data>
<Data Name="param9">\\RDPSERVER01</Data>
<Data Name="param10">5</Data>
<Data Name="param11">Access is denied.
</Data>
</EventData>
</Event>

This happens even to members of the administrator's group and I have tried
adding an administrator to the Print Operators group without any improvement.

What authority where needs to be granted so the remote users can print?

Thanks

 

[Vera Noest [MVP]]

Re: Printing via RDP from W2K8 access denied error

The most likely cause for this problem is that you are using a
printer driver which isn't TS compatible.
Have you enabled EasyPrint?

http://blogs.technet.com/askperf/archive/2008/02/17/ws2008-
terminal-services-printing.aspx
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?Um9nZXIgVmlja2Vy?=
<RogerVicker@discussions.microsoft.com> wrote on 12 okt 2008 in
microsoft.public.windows.terminal_services:

> Environment: single W2K8 server domain (no other server of any
> size, function or flavor) and users on XP over a WAN.
>
> The users can connect, work and see their local printers
> redirected in RDP. However whenever they print nothing ever
> arrives at their local printer. The server's event log shows an
> 6161 event.
>
> The document Test Page, owned by it, failed to print on printer
> USERSPRT (redirected 3). Try to print the document again, or
> restart the print spooler.
> Data type: RAW. Size of the spool file in bytes: 135341. Number
> of bytes printed: 0. Total number of pages in the document: 1.
> Number of pages printed: 0. Client computer: \\RDPSERVER01.
> Win32 error code returned by the print processor: 5. Access is
> denied.
>
> Log Name: System
> Source: Microsoft-Windows-PrintSpooler
> Date: 10/11/2008 8:05:59 PM
> Event ID: 6161
> Task Category: None
> Level: Error
> Keywords: Classic
> User: RDPDOMAIN\it
> Computer: RDPSERVER01.RDPDOMAIN.local
> Description:
> The document Test Page, owned by it, failed to print on printer
> USERSPRT (redirected 3). Try to print the document again, or
> restart the print spooler.
> Data type: RAW. Size of the spool file in bytes: 135085. Number
> of bytes printed: 0. Total number of pages in the document: 1.
> Number of pages printed: 0. Client computer: \\RDPSERVER01.
> Win32 error code returned by the print processor: 5. Access is
> denied.
>
> This happens even to members of the administrator's group and I
> have tried adding an administrator to the Print Operators group
> without any improvement.
>
> What authority where needs to be granted so the remote users can
> print?
>
> Thanks

 

[Roger Vicker]

Re: Printing via RDP from W2K8 access denied error

Easy Print is enabled by default.

I have added the GPO for "Use Terminal Services Easy Print driver first"


"Vera Noest [MVP]" wrote:

> The most likely cause for this problem is that you are using a
> printer driver which isn't TS compatible.
> Have you enabled EasyPrint?
>
> http://blogs.technet.com/askperf/archive/2008/02/17/ws2008-
> terminal-services-printing.aspx
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
>

 

[Vera Noest [MVP]]

Re: Printing via RDP from W2K8 access denied error

Mmm. And the clients are running .NET 3.0 SP1 or higher?

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?Um9nZXIgVmlja2Vy?=
<RogerVicker@discussions.microsoft.com> wrote on 13 okt 2008 in
microsoft.public.windows.terminal_services:

> Easy Print is enabled by default.
>
> I have added the GPO for "Use Terminal Services Easy Print
> driver first"
>
>
> "Vera Noest [MVP]" wrote:
>
>> The most likely cause for this problem is that you are using a
>> printer driver which isn't TS compatible.
>> Have you enabled EasyPrint?
>>
>> http://blogs.technet.com/askperf/archive/2008/02/17/ws2008-
>> terminal-services-printing.aspx

 

[Roger Vicker]

Re: Printing via RDP from W2K8 access denied error

Yep. And in at least one case all the patches since that.

It sure looks like something going on in the server because it is the one
logging the access denied 6161.

I have seen some posts about "domain users" authority to the Spooler folder
but this is W2K8.


"Vera Noest [MVP]" wrote:

> Mmm. And the clients are running .NET 3.0 SP1 or higher?
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?Um9nZXIgVmlja2Vy?=
> <RogerVicker@discussions.microsoft.com> wrote on 13 okt 2008 in
> microsoft.public.windows.terminal_services:
>
> > Easy Print is enabled by default.
> >
> > I have added the GPO for "Use Terminal Services Easy Print
> > driver first"
> >
> >
> > "Vera Noest [MVP]" wrote:
> >
> >> The most likely cause for this problem is that you are using a
> >> printer driver which isn't TS compatible.
> >> Have you enabled EasyPrint?
> >>
> >> http://blogs.technet.com/askperf/archive/2008/02/17/ws2008-
> >> terminal-services-printing.aspx
>