IPP printing puzzle!!

  • Thread starter Thread starter Clyde Richardson
  • Start date Start date
C

Clyde Richardson

Hi,

We have IPP set up and had it working until we joined an active directory domain. Now, even though you can install the printer by going the old fashion route: locating the server, right clicking and then installing, if you try to install via the browser, the error returned is:



Printer Installation Failed

Access is denied.

I have even tried installing it with an administrator account for the active directory domain.

Any assistance would be appreciated.

- Clyde R.
 
Hi Clyde,

Here is some information that may be useful:
I found that the IPP printer installation problem is related to IE Security
setting. Please refer to the following link to download Connectivity.doc to
learn
the details.

http://www.microsoft.com/windowsserver2003/techinfo/overview/connectivity.ms
px

-----------------------

Internet Printing:

When a user connects to a printer through the Web-based printer management,
one of two things can happen: Either Windows creates an IPP printer
connection using an HTTP port, or Windows creates an RPC ¡°true-connect¡±
printer connection.

HTTP Printer Connection Through Web Browser:

If the client¡¯s Internet Explorer security settings for the print server
are set to medium or higher, Windows creates an IPP printer connection
using an HTTP port.
Because this technology requires the installation of a local printer queue
(unlike a true Point-and-Print connection, which uses RPC), the client must
have either
Administrator or Power User status with the added Load and unload driver
privilege on the local machine. (On Windows 2000 Server, this connection
also works if the
client has only Power User privilege.)

This solution is recommended only for Internet sites-specifically,
untrusted sites viewed by a browser in which the security settings must be
set to medium or higher.
This type of printing works very well to print data in one location on a
page at another location that does not share security or network
infrastructure. However,
HTTP printer connections are more limited than RPC true-connections
(described below) in a Windows printing environment, as they do not support
enhanced metafile
(EMF) features.

RPC Printer Connection Through Web Browser - Preferred Method:

If the client¡¯s Internet Explorer settings are set to medium-low or lower,
when the client chooses the connect option in a Web browser, Windows
automatically
creates an RPC true-connect printer connection. True-connect, or UNC,
connections have many benefits over true IPP printer connections and should
be used for
intranet printing (local to the company) where the security setting in
Internet Explorer can be set to medium-low safely. True-connect connections
are supported
through the Windows remote spooler, which is where the vast majority of
Microsoft¡¯s future innovation will be-in the RPC printer connection rather
than
the IPP printer connection state.

I have tested this solution in my lab. It works as expected. Please pick up
a Windows 2000 workstation to test it.

On a Windows 2000 workstation, login as a standard domain user, open
Control Panel\Internet Options, switch to the Security tab, set the
security level of
Internet zone to Medium-Low, and click OK. Try to install an IPP printer in
IE, and check to see if the problem persists.

You also can deploy this setting via GPO.

On DC, edit GPO, navigate to User Configuration\Windows Settings\Internet
Explorer Maintenance, right click on Security Zones and Content Ratings,
and select
Properties. In the Security Zones and Content Ratings window, select the
<Import the current security zones and privacy settings> option, and click
Modify Settings.
In the Internet Properties window, set the security level of Internet zone
to Medium-Low, and click OK.

---------------------
Thank You.

Diana.


(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top