Highlighted
Trusted Contributor.
Trusted Contributor.
2682 views

Printer can be installed only as admin user on windows 10 ?

We have a problem installing printers on Windows 10 (error 10060) if we try to install printer as normal user.

I narrowed problem to communication problem on iprint client's side. Tried to install (or even only communicate with server) using iprntcmd commnad line.

As user who is member of domain admins, normal comand prompt :
iprntcmd -v print.domain.com

Could not get Version information for server print.domain.com
Winsock 10060 - connection has timed out

As the same user, elevated (run as admin) command prompt:
iprntcmd -v print.domain.com

Version information for server print.domain.com.
system: Linux
release: 3.0.101-108.68-default
version: #1 SMP Mon Aug 13 18:53:23 UTC 2018 (ef94234)
revision:
machine: x86_64
node: server-name
domain name:
iPrint server version: 3.0.2
iPrint authentication: LDAP_DN (contextless or LDAP typed name with context)
Example user: user or CN=user,OU=provo,O=novell

telnet to 631 CONNECTS!!! in both cases, so it is not port blocked ...

iPrint client is 6.15

Any idea anyone ?
0 Likes
16 Replies
Highlighted
Knowledge Partner
Knowledge Partner

Re: Printer can be installed only as admin user on windows 1

BSajovic;2486638 wrote:
We have a problem installing printers on Windows 10 (error 10060) if we try to install printer as normal user.

I narrowed problem to communication problem on iprint client's side. Tried to install (or even only communicate with server) using iprntcmd commnad line.

As user who is member of domain admins, normal comand prompt :
iprntcmd -v print.domain.com

Could not get Version information for server print.domain.com
Winsock 10060 - connection has timed out

As the same user, elevated (run as admin) command prompt:
iprntcmd -v print.domain.com

Version information for server print.domain.com.
system: Linux
release: 3.0.101-108.68-default
version: #1 SMP Mon Aug 13 18:53:23 UTC 2018 (ef94234)
revision:
machine: x86_64
node: server-name
domain name:
iPrint server version: 3.0.2
iPrint authentication: LDAP_DN (contextless or LDAP typed name with context)
Example user: user or CN=user,OU=provo,O=novell

telnet to 631 CONNECTS!!! in both cases, so it is not port blocked ...

iPrint client is 6.15

Any idea anyone ?


Not sure if related but have a look at these TIDs: https://www.novell.com/support/kb/doc.php?id=7018881 & https://www.novell.com/support/kb/doc.php?id=7003285

Thomas
0 Likes
Highlighted
Trusted Contributor.
Trusted Contributor.

Re: Printer can be installed only as admin user on windows 1

Thanks, I saw those.
INI is set as in TID, AllowWSACLPrinters=1 and AllowUserPrinters=2

The point is, that even trying only to get servers version from server (it has nothing to do with printers ?) immediately results in winsock 10060 (timeout) error.

Wireshark shows in case of normal CMD promt and "iprntcmd -v print.domain.com" :
TCP SYN to print server
TCP SYN,ACK from print server
... and then conversation ends.....

in case of elevated command prompt :
TCP SYN to print server
TCP SYN,ACK from print server
TCP ACK to server
IPP request, IPP response ... (normal conversation)

It looks like in case of normal command prompt iprntcmd only connects with server on port 631 and then immediately times out ?
0 Likes
Highlighted
Knowledge Partner
Knowledge Partner

Re: Printer can be installed only as admin user on windows 1

BSajovic;2486641 wrote:
Thanks, I saw those.
INI is set as in TID, AllowWSACLPrinters=1 and AllowUserPrinters=2

The point is, that even trying only to get servers version from server (it has nothing to do with printers ?) immediately results in winsock 10060 (timeout) error.

Wireshark shows in case of normal CMD promt and "iprntcmd -v print.domain.com" :
TCP SYN to print server
TCP SYN,ACK from print server
... and then conversation ends.....

in case of elevated command prompt :
TCP SYN to print server
TCP SYN,ACK from print server
TCP ACK to server
IPP request, IPP response ... (normal conversation)

It looks like in case of normal command prompt iprntcmd only connects with server on port 631 and then immediately times out ?


Found this: https://www.novell.com/support/kb/doc.php?id=3484700 maybe it also apply for W10.

Thomas
0 Likes
Highlighted
Knowledge Partner
Knowledge Partner

Re: Printer can be installed only as admin user on windows 1

thsundel;2486643 wrote:
Found this: https://www.novell.com/support/kb/doc.php?id=3484700 maybe it also apply for W10.

Thomas


Sry: this is the correct link: https://www.novell.com/support/kb/doc.php?id=7009357
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Printer can be installed only as admin user on windows 10 ?

On 30-08-18 10:44, BSajovic wrote:
>
> Thanks, I saw those.
> INI is set as in TID, AllowWSACLPrinters=1 and AllowUserPrinters=2
>



This is only to install user printers, normally in citrix/xen servers.
Is this your scenario? If it is, see tid 7009357 as well

If it is not, then change AllowUserPrinters=3

If still problems, take an ipp trace, tid7007023 while duplicating the
issue so more info will show. Also interesting to know the exact Windows
10 version and build
0 Likes
Highlighted
Trusted Contributor.
Trusted Contributor.

Re: Printer can be installed only as admin user on windows 1

No, it is not Citrix.
Windows 10 notebooks. "Run all administrators in admin approval mode is set to enabled.

Windows is Version 10.0.17134.167
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Printer can be installed only as admin user on windows 10 ?

On 30-08-18 11:14, BSajovic wrote:
>
> No, it is not Citrix.
> Windows 10 notebooks. "Run all administrators in admin approval mode is
> set to enabled.
>
> Windows is Version 10.0.17134.167
>
>


change AllowUserPrinters=3
0 Likes
Highlighted
Trusted Contributor.
Trusted Contributor.

Re: Printer can be installed only as admin user on windows 1

OK, i have 400+ users.
How will it affect currently installed printers on windows 7 workstations ?
0 Likes
Highlighted
Trusted Contributor.
Trusted Contributor.

Re: Printer can be installed only as admin user on windows 1

Mysterious;2486648 wrote:

change AllowUserPrinters=3


I tried. Still no luck.

Anyhow, how can AllowUserPrinters=3 affect getting print server version from server using iprntcmd ?

I think that it is a permission problem of some sort, but I don't know where ?
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Printer can be installed only as admin user on windows 10 ?

On 30-08-18 11:44, BSajovic wrote:
>
> Mysterious;2486648 Wrote:
>>
>> change AllowUserPrinters=3

>
> I tried. Still no luck.
>
> Anyhow, how can AllowUserPrinters=3 affect getting print server version
> from server using iprntcmd ?
>
> I think that it is a permission problem of some sort, but I don't know
> where ?
>
>


the change was to install the printers, not to get the server version.
Did you test to install a printer after change this setting? What error
do you get?
server version can only be queried by the user added as printmanager acl
in imanager

0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Printer can be installed only as admin user on windows 10 ?

On 30-08-18 11:34, BSajovic wrote:
>
> OK, i have 400+ users.
> How will it affect currently installed printers on windows 7
> workstations ?
>
>


changing setting only affect when installing a printer. already
installed printers are not affected.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.