Hey there
I am currently in the process of developing/testing a proposed printing environment for our department and have run into a bit of an issue.
We have gone with the approach of have a network based VIP configured on a Cisco device which will forward packets to 2 identical print servers.
The servers are running Windows Server 2003 SP2.
The specs are:
Server1, IP add: 10.1.7.192
Server2, IP add: 10.1.7.193
VIP ip address: 10.1.7.194. DNS record: "printtest"
The issue is this. When I browse to \\Server1\ I can see the shared print queues and can print to them with no issues. The same is for \\Server2\. However when I browse to \\printtest\ i can see the shared print queues but when i try to connect to the printer, i am getting an "Access is denied" error. The same issue is happening for both XP and Vista clients. The exact error message is:
"Operation could not be completed (error 0x00000005). Access is denied"
I have configured "DisableStrictNameChecking" in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters with a Decimal value of 1.
I have also tried creating the OptionalNames REG_MULTI_SZ reg key in the same directory with "printtest" as a parameter but doesnt seem to have helped.
I then had the idea that it may be an issue to do with Kerberos authentication so I created a computer object in AD for "printtest" with the option to "Trust this computer for delegation to any service (Kerberos only)" selected but this did not help.
I even tried adding the "Everyone" group to the printer's security but this also failed.
The VIP has been configured to forward to the 2 ip address based on least connections on ports 445,88,135,137,138 and 139. I have eliminated the possibility that it may be a load balancing issue on the VIP side by shutting down Server2 so all packets are directed to Server1.
I have set up Wireshark packet captures on both my workstation and Server1 but havent been able to find anything useful.
Here is the output from my pc im getting when the issue occurs in the form of:
Srcaddr; Destaddr; Protocol; Info
1. 192.168.1.152; 10.1.7.194; SPOOLSS; OpenPrinterEx request, \\printtest\myprinter
2. 10.1.7.194; 192.168.1.152; SPOOLSS; OpenPrinterEx response, Access denied
(where my workstation is 192.168.1.152)
Has anyone got any ideas as to why I am getting this error?
Cheers
Brady
I am currently in the process of developing/testing a proposed printing environment for our department and have run into a bit of an issue.
We have gone with the approach of have a network based VIP configured on a Cisco device which will forward packets to 2 identical print servers.
The servers are running Windows Server 2003 SP2.
The specs are:
Server1, IP add: 10.1.7.192
Server2, IP add: 10.1.7.193
VIP ip address: 10.1.7.194. DNS record: "printtest"
The issue is this. When I browse to \\Server1\ I can see the shared print queues and can print to them with no issues. The same is for \\Server2\. However when I browse to \\printtest\ i can see the shared print queues but when i try to connect to the printer, i am getting an "Access is denied" error. The same issue is happening for both XP and Vista clients. The exact error message is:
"Operation could not be completed (error 0x00000005). Access is denied"
I have configured "DisableStrictNameChecking" in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters with a Decimal value of 1.
I have also tried creating the OptionalNames REG_MULTI_SZ reg key in the same directory with "printtest" as a parameter but doesnt seem to have helped.
I then had the idea that it may be an issue to do with Kerberos authentication so I created a computer object in AD for "printtest" with the option to "Trust this computer for delegation to any service (Kerberos only)" selected but this did not help.
I even tried adding the "Everyone" group to the printer's security but this also failed.
The VIP has been configured to forward to the 2 ip address based on least connections on ports 445,88,135,137,138 and 139. I have eliminated the possibility that it may be a load balancing issue on the VIP side by shutting down Server2 so all packets are directed to Server1.
I have set up Wireshark packet captures on both my workstation and Server1 but havent been able to find anything useful.
Here is the output from my pc im getting when the issue occurs in the form of:
Srcaddr; Destaddr; Protocol; Info
1. 192.168.1.152; 10.1.7.194; SPOOLSS; OpenPrinterEx request, \\printtest\myprinter
2. 10.1.7.194; 192.168.1.152; SPOOLSS; OpenPrinterEx response, Access denied
(where my workstation is 192.168.1.152)
Has anyone got any ideas as to why I am getting this error?
Cheers
Brady