Server 2008R2 - Workgroup - Annonymous Printing

Answered Server 2008R2 - Workgroup - Annonymous Printing

  • Thursday, February 07, 2013 3:19 PM
     
     

    Hi,

    I have a Workgroup of Server 2008 R2 and W7 Pro/Ent (the current option that we need to use) that I wish to allow anonymous printing to specific printers for guest access (W7 & XP). My Workgroup clients can connect fine as their local logons also exist on the server with the same passwords.

    If i enter the URL on a guest machine to the path of the printer shared on the server i get 'logon failure: the user has not been granted the requested logon type at this computer'

    I have added the Anonymous Group to the printer that is shared but the error persists.

    Any advice would be appreciated.

    Cheers

    DS

All Replies

  • Friday, February 08, 2013 4:45 AM
     
     Answered
    Do you enabled the guest account on the server ? By default it's disabled.

    MCP | MCTS 70-236: Exchange Server 2007, Configuring

    Twitter - @yagmoth555 ()
    Blog: http://www.jabea.net | http://blogs.technet.com/b/wikininjas/

  • Saturday, February 09, 2013 2:40 PM
     
     

    thanks for the reply, but i was always advised not to enable the account for security reasons

    'The Guest account is disabled by default, and we recommend that it stay disabled'

    Apart from enabling the account is there any other solution you can suggest?

  • Tuesday, February 12, 2013 3:59 PM
    Answerer
     
     
    I'm pretty sure you will need to enable the Guest account in order to get your Anonymous solution working.  If you find another way be sure to let us know.

    Alan Morris Windows Printing Team



  • Wednesday, February 13, 2013 7:50 PM
    Answerer
     
     

    Ok, stupid me for not also presenting an alternate connection method.  You can also enable the LPD service on the print server, then have the client create a local printer which use a Standard TCP/IP Port or an LPR Port targeting the LPD share.   Make the share name one word for ease of setup on the clients.

    The LPD service does not use typical Windows security

    http://social.technet.microsoft.com/Forums/gu-IN/winserverprint/thread/662b2e2e-307c-42d3-b5ab-099080e8111e


    Alan Morris Windows Printing Team

  • Sunday, February 17, 2013 12:43 PM
     
     

    The above alternative is not really an option for guests wanting to connect to a printer in our environment as it requires IT to set it up for them. I am sure many non IT do not know how to create a local port.I have checked, and the Guest & Anonymous Users have access to the Shared printer, however the original error persists.

  • Monday, February 18, 2013 1:44 AM
     
     

    Did you enable the guest user account ? you can select it when you change share security, but make sure it's not disabled.

    If you enable the guest account, then try a \\server_ip and if that return you a security error, let us know and I will dig deeper for a security setting that could block you.

    For another solution never forget you can use like a router printer sharing, or from a nas if you got one. Usually those printer sharing check almost nothing in term of security.


    MCP | MCTS 70-236: Exchange Server 2007, Configuring

    Twitter - @yagmoth555 ()
    Blog: http://www.jabea.net | http://blogs.technet.com/b/wikininjas/

  • Monday, February 18, 2013 6:49 AM
     
     

    guest account is enabled. \\server_ip gives the same error.

    the NAS allows for printing but only if connected via USB, which is impractical in our environment.

  • Tuesday, February 19, 2013 3:22 AM
     
     Answered

    If \\server_ip give the error, then it's a local security setting that block you.

    Try that one, Network access: Shares that can be accessed anonymously, and add the shared name of your printer (\\server_ip\printershare should open after)


    MCP | MCTS 70-236: Exchange Server 2007, Configuring

    Twitter - @yagmoth555 ()
    Blog: http://www.jabea.net | http://blogs.technet.com/b/wikininjas/


    • Edited by Yagmoth555 Tuesday, February 19, 2013 3:23 AM
    • Marked As Answer by Dean Scott Tuesday, February 19, 2013 4:02 PM
    •  
  • Tuesday, February 19, 2013 4:06 PM
     
     

    Thank you for this.

    Removed the Guest Group from the Server Local Security setting. No need for the Anonymous or Guest account on the Shared printer. Renamed and set a password on the Guest account. Users can now Run to the Server, authenticate and are presented with the available Shares.

    No need for the ip.