ALL APPLICATION PACKAGES group in Print Server Properties - Security tab RRS feed

  • Question

  • Hi

    Can someone tell me why the group "ALL APPLICATION PACKAGES" is in Print Server Properties - Security tab by default.

    It has got the following access:

    Manage Documents
    View Server

    I do not like to grant access to something/someone i do not know, even if it is "just" a print server.

    Can i be removed without compromising the functionality of the print server?

    Teddy Holm

    • Edited by Teddy Holm Thursday, August 25, 2016 7:36 AM TYPO
    Thursday, August 25, 2016 7:35 AM


  • Ok you busted me ;)

    I can't refer you to any specific documentation on this item, but here's my take on it:

    Metro/Modern/Windows Store/Universal Windows Apps, can offer print capabilities.
    Due to the sandboxed security model of UWAs, this security principal grants UWAs the ability to access the outside-the-sandbox print subsystem.

    So, as per the links (and some other web searches) if you don't need for UWAs to print, you could tinker with the ACL and remove the ACE.

    Don [doesn't work for MSFT, and they're probably glad about that ;]

    Thursday, August 25, 2016 9:19 PM

All replies