Quantcast
Channel: Print/Fax forum
Viewing all articles
Browse latest Browse all 1589

Removing CREATOR OWNER causes Access Denied on Server 2012 / 2012 R2

$
0
0

On earlier Server OSes, manually or programmatically removing CREATOR OWNER from print queue security permissions works fine. But on Server 2012 and 2012 R2 we have sites where attempting to print to such a queue results in Access Denied errors.

At first I suspected it was incorrect ordering of DACLS between working and problematic queues, as at one site removing and re-adding the ALL APPLICATION PACKAGES principal resolved the problem. In this case 1 and 3 were reversed below:

Working:

  1. (A;OIIO;RPWPSDRCWDWO;;;AC)
  2. (A;;SWRC;;;AC)
  3. (A;CIIO;RC;;;AC)

Problematic:

  1. (A;CIIO;RC;;;AC)
  2. (A;;SWRC;;;AC)
  3. (A;OIIO;RPWPSDRCWDWO;;;AC)

Note that these are set by Windows, not us. But other sites show no DACL differences or other differences and still don't work. The problem seems common with built-in drivers, for instance "HP Color LaserJet 2700 PCL6 Class Driver" on Server 2012 R2. Can anyone confirm this is a bug in 2012 and whether there's a work-around?


Viewing all articles
Browse latest Browse all 1589

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>