Removing CREATOR OWNER causes Access Denied on Server 2012 / 2012 R2
on earlier server oses, manually or programmatically removing creator owner print queue security permissions works fine. on server 2012 , 2012 r2 have sites attempting print such queue results in access denied errors.
at first suspected incorrect ordering of dacls between working , problematic queues, @ 1 site removing , re-adding application packages principal resolved problem. in case 1 , 3 reversed below:
working:
- (a;oiio;rpwpsdrcwdwo;;;ac)
- (a;;swrc;;;ac)
- (a;ciio;rc;;;ac)
problematic:
- (a;ciio;rc;;;ac)
- (a;;swrc;;;ac)
- (a;oiio;rpwpsdrcwdwo;;;ac)
note these set windows, not us. other sites show no dacl differences or other differences , still don't work. problem seems common built-in drivers, instance "hp color laserjet 2700 pcl6 class driver" on server 2012 r2. can confirm bug in 2012 , whether there's work-around?
bug fixed in 2012/2012 r2 update 3139649 - optional update available now.
also fixed in server 2016.
many @ ms genuinely care helping customers.
cheers, nick.
Windows Server > Print/Fax
Comments
Post a Comment