Network printing mystery

Hi! We run a Windows enterprise with W2003 servers and 2 domains. One
of the domain controllers is the print server. We have a giant Xerox
printer that everyone in both domains print to. They've been doing
this no problem until this week.

Half the people in the building can't print to this printer. Their end
says the document failed to print and has been deleted. It simply
disappears like it never existed. In the event logs of the print
server I keep seeing this:

"The document Microsoft Word - MyDoc.doc owned by someuser failed to
print on printer Xerox WorkCentre Pro 255 PS. Data type: NT EMF 1.008.
Size of the spool file in bytes: 65536. Number of bytes printed: 0.
Total number of pages in the document: 1. Number of pages printed: 0.
Client machine: \\SOMECLIENT. Win32 error code returned by the print
processor: 0. The operation completed successfully."

This only started last week. Since then I've checked all permissions
on that printer. Everyone has full control. I even added "Domain
Users" from both domains into security. If I log on to any of these
workstations as the domain administrator, it prints fine. Log in as a
user and it fails every time.

Domain abc.com hosts the print server. Domain users in abc.com can
print fine. Domain xyz.com cannot print at all, unless it's the domain
administrator. The following are in security with full control for
said printer:

abc.com Administrators
Authenticated users
Creator owner
abc.com domain users
xyz.com domain users
Everyone
Print Operators, abc.com
server operators, abd.com
xyz.com's active directory master (machine, not user)

Once in a while I see this in event viewer:

"The kerberos client received a KRB_AP_ERR_MODIFIED error from the
server FRANCESCALP$. The target name used was cifs/FRANCESCALP. This
indicates that the password used to encrypt the kerberos service
ticket is different than that on the target server. Commonly, this is
due to identically named machine accounts in the target realm
(XYZ.COM), and the client realm. Please contact your system
administrator."

The server has had all Windows updates and has been restarted from
power down.

I'm 100% stumped. There's no indication at all as to where the problem
is, printed documents simply disappear without reason.

Any help much appreciated, thanks!

hi,
on print server check on local policies or on GPO that apply to that printer
server the security settings - allow access this computer from network (it
have to be xyz.com domain users) and deny access this computer from network
if the proper groups are there.
--
Dragos CAMARA
MCSA Windows 2003 server


"Tom wilson" wrote:

> Hi! We run a Windows enterprise with W2003 servers and 2 domains. One
> of the domain controllers is the print server. We have a giant Xerox
> printer that everyone in both domains print to. They've been doing
> this no problem until this week.
>
> Half the people in the building can't print to this printer. Their end
> says the document failed to print and has been deleted. It simply
> disappears like it never existed. In the event logs of the print
> server I keep seeing this:
>
> "The document Microsoft Word - MyDoc.doc owned by someuser failed to
> print on printer Xerox WorkCentre Pro 255 PS. Data type: NT EMF 1.008.
> Size of the spool file in bytes: 65536. Number of bytes printed: 0.
> Total number of pages in the document: 1. Number of pages printed: 0.
> Client machine: \\SOMECLIENT. Win32 error code returned by the print
> processor: 0. The operation completed successfully."
>
> This only started last week. Since then I've checked all permissions
> on that printer. Everyone has full control. I even added "Domain
> Users" from both domains into security. If I log on to any of these
> workstations as the domain administrator, it prints fine. Log in as a
> user and it fails every time.
>
> Domain abc.com hosts the print server. Domain users in abc.com can
> print fine. Domain xyz.com cannot print at all, unless it's the domain
> administrator. The following are in security with full control for
> said printer:
>
> abc.com Administrators
> Authenticated users
> Creator owner
> abc.com domain users
> xyz.com domain users
> Everyone
> Print Operators, abc.com
> server operators, abd.com
> xyz.com's active directory master (machine, not user)
>
> Once in a while I see this in event viewer:
>
> "The kerberos client received a KRB_AP_ERR_MODIFIED error from the
> server FRANCESCALP$. The target name used was cifs/FRANCESCALP. This
> indicates that the password used to encrypt the kerberos service
> ticket is different than that on the target server. Commonly, this is
> due to identically named machine accounts in the target realm
> (XYZ.COM), and the client realm. Please contact your system
> administrator."
>
> The server has had all Windows updates and has been restarted from
> power down.
>
> I'm 100% stumped. There's no indication at all as to where the problem
> is, printed documents simply disappear without reason.
>
> Any help much appreciated, thanks!
>
>

Thanks, it seems a recent Windows Update screwed up the cross domain
permissions on one of our AD masters. I installed the driver on a
server that was a member of the non-printing domain. Problem solved,
thanks for the reply.


On Tue, 17 Jul 2007 23:28:02 -0700, Dragos CAMARA
<(E-Mail Removed)> wrote:

>hi,
>on print server check on local policies or on GPO that apply to that printer
>server the security settings - allow access this computer from network (it
>have to be xyz.com domain users) and deny access this computer from network
>if the proper groups are there.