question

johnjin-6808 avatar image
0 Votes"
johnjin-6808 asked johnjin-6808 commented

Keep network printer credentials permanently?

I have the following windows server 2019 environment setup:

-windows print server

-IIS 10 with the https printer page

-Windows AD

I can setup network printer on client machine with the following Powershell script given the driver is installed on the client machine:

Add-Printer -Name "My Server Printer" -PortName "https://domain-name/printers/printername/.printer" -DriverName "Drivername"

But every now and then, the client machine stops accessing the printer properly and just gives out straight 'access denied' message. I'll have to remove the printer, remove the port setting, re-add the printer back to make it working again before it denies me yet again.

Other times it will ask me for network credentials even I'm already logged in as one of the domain users who has permission to print/change the printer.

How do I make my settings permanent?

Thanks for any help.

windows-server-print
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

KarlieWeng-MSFT avatar image
0 Votes"
KarlieWeng-MSFT answered johnjin-6808 commented

Hello @johnjin-6808

1). Does this issue occurred randomly or regularly?
2). Can you dig into the event log , and find out is there any more detailed error message when the issue occurred ?
3). Have you try using other method to setup printer than powershell?
4). Close any Anti-Virus software or restart print spooler service, and see if the issue persist?
5). Run the Printer troubleshooter and check if it helps.
43136-image.png



If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Best Regards
Karlie



image.png (77.3 KiB)
· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Karlie,

1) I think there is a pattern to it but I can't figure exactly. My guess is when sometimes the network environment changes or another user who has the same permission, logs in the computer, it will trigger this behavior. But I can't guarantee it happens.
2) there's nothing really interesting in Print Services nor the Security logs of the client side and server side.
3) Yes, manually adding through control panel has the same issue
4) no anti-virus is installed. print spooler restart sometimes work (will ask user for credential), other times won't (just keep denying access)
5) Printer troubleshooter does the same as 4)

If you can help me with finding the events about being denied accessing network printers. I think it will help me find the issue.

Regards,
John

0 Votes 0 ·

Hi John,

You could also try change the group policy.

  1. Click Start and type gpedit.msc and open Local Group Policy Editor

  2. Go to the Group Policy followed by Computer Configuration\Administrative Templates\Printers\Point and Print Restrictions

  3. Click on Point and Print Restrictions, set it to disabled, and press Apply

  4. Go the Policy Group page under User Configuration\Administrative Templates\Printers\Point and Print Restrictions and repeat again the procedure and set it to Disabled.

Use the Windows Event Viewer to track printing events

Thanks
Karlie

0 Votes 0 ·

Hi Karlie,

I found a single colleague's computer for me to test around with this issue happened regularly.
I went to the group policy, and both are Not Configured. I think it would have an equal affect as Disabled. Although, I did disable them.

upon further searching, I'm confused by what the description says. When turned Disabled, It's supposed to suppress any warnings that comes up when point and print is used. Although I did setup the printer server on windows, I'm still asked for driver installation for each configuration on every computer that joined the domain. Thus, I don't believe Point and Print is used when creating the connection. Maybe I am wrong because I know nothing about the topic, but if you can give a brief explanation as why or where to look at the protocol/process etc, it will help me a lot.

Until then, let's wait and see if it works.

Thanks
John

1 Vote 1 ·
Show more comments