w2k3 printing issue

[BobMarley]

we had a print server (W2K Advanced Server). Some domain systems
printed to this, without problem. By domain systems, I mean that a
server, in the domain, had a service (running as localsystem) which
was able to issue print jobs.

we upgraded the print server to a W2K3 Enterprise cluster on monday.

it seems now that services on servers, started as localsystem, can no
longer print to the print server. i re-started a service, running it
as a domain account.. and it worked.

any idea where they locked this down in W2K3 and how to un-lock it? i
have multiple systems w/ problems as a result

 

[Jorge_de_Almeida_Pinto]

we had a print server (W2K Advanced Server). Some domain
systems
printed to this, without problem. By domain systems, I mean
that a
server, in the domain, had a service (running as localsystem)
which
was able to issue print jobs.

we upgraded the print server to a W2K3 Enterprise cluster on
monday.

it seems now that services on servers, started as localsystem,
can no
longer print to the print server. i re-started a service,
running it
as a domain account.. and it worked.

any idea where they locked this down in W2K3 and how to
un-lock it? i
have multiple systems w/ problems as a result

I’m not sure if this is the cause, but a difference between w2k and
w2k3 servers is that with w2k3 servers the ’anonymous logon’
security principal does not belong to everyone. You can do two things
to try if this is the problem:
* Assign anonymous logon the same permissions as everyone to the
printers
* Change the security policy on the w2k3 server called ’network
access - let everyone permissions apply to anonymous users’ to
enabled

I prefer to do the first as it only impacts the printer, against the
second that impacts the whole server

Hope this helps you. Good luck!

 

[BobMarley]

ok i see how you do option #2....
i agree, option #1 sounds better... how do you go about that though?
Where would you assign priveleges to the anonymous login?

 

[BobMarley]

got it working!
good call, thank you very much!! used option #1 and now the services
can print...