StartDoc fails on W2003 SP1 on a restricted user

  • Thread starter Thread starter Cosmin Popescu
  • Start date Start date
C

Cosmin Popescu

After upgrading to Windows 2003 SP1 when trying to print a CDC, StartDoc
called on CDC fails (with error code -1) if the process is impersonated with
a restricted user.
This is happening only after upgrading to SP1 and only when the process is
impersonated with a restricted user.

If the spooler is not used ("Start printing immediately" is checked), the
print starts to work.

It seems that Microsoft changed something in 2003 SP1.
http://www.microsoft.com/technet/security/Bulletin/MS05-043.mspx

Any idea how to fix this and still use the spooler?
 
Hi Cosmin,

Thank you posting!
It seems that Microsoft changed something in 2003 SP1.
http://www.microsoft.com/technet/security/Bulletin/MS05-043.mspx
Any idea how to fix this and still use the spooler?

yes, the Windows 2003 SP1 matters. I have performed some research on this
issue, it appears the non-local admin account may have some limitations to
access the spooler service after the installation of the Win2003 SP1.

However I am not clear with the Windows 2003 admin issues, I suggest you
consult this problem to a more appropriate Windows specific newsgroup,
you'd get better and quicker help there to find whether there has a
workaround to this issue.

Thanks for your understanding.


Best regards,

Gary Chang
Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Hi Gary,

Thanks for your quick answer. Which newsgroup do you recommend me to post
this problem on? I didn't find a related Windows 2003 group...

Thanks,
Cosmin Popescu

"Gary Chang[MSFT]" said:
Hi Cosmin,

Thank you posting!
It seems that Microsoft changed something in 2003 SP1.
http://www.microsoft.com/technet/security/Bulletin/MS05-043.mspx
Any idea how to fix this and still use the spooler?

yes, the Windows 2003 SP1 matters. I have performed some research on this
issue, it appears the non-local admin account may have some limitations to
access the spooler service after the installation of the Win2003 SP1.

However I am not clear with the Windows 2003 admin issues, I suggest you
consult this problem to a more appropriate Windows specific newsgroup,
you'd get better and quicker help there to find whether there has a
workaround to this issue.

Thanks for your understanding.


Best regards,

Gary Chang
Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Hi Cosmin,

We don't have a Windows 2003 specific newsgroup. But I suggest you can try
the following ones:

microsoft.public.windows.server.general
microsoft.public.windows.server.security

Thanks!


Best regards,

Gary Chang
Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top