The Add and Remove commands on the Drivers tab are unavailable on a remote Windows Vista-based print server

The Add and Remove commands on the Drivers tab are unavailable on a remote Windows Vista-based print server

Article ID : 927832
Last Review : March 15, 2007
Revision : 1.5
Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 (/Feedback.aspx?kbNumber=256986/) Description of the Microsoft Windows registry

SYMPTOMS

When you open the Server Properties dialog box on a Windows Vista-based print server through a remote connection, you find that the Add and Remove commands on the Drivers tab are unavailable.

Back to the top

CAUSE

The symptom occurs if the following conditions are true:

• The Windows Vista-based print server is in a workgroup.
• You log on to a client Windows Vista-based computer by using credentials that include administrative rights for the Windows Vista-based print server in the workgroup.
• From the client computer, you remotely connect to the Windows Vista-based print server.

This issue occurs because the administrator credentials that are required to remotely administer the print drivers on the Windows Vista-based print server are removed by the User Account Control (UAC). This is the default security behavior in Windows Vista.

Back to the top

WORKAROUND

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To work around this behavior, you can log on to the print server locally to add or to remove the drivers. Alternatively, you can change the registry on the Windows Vista-based print server so that full credentials are passed between the client computer and the print server. To change the registry, follow these steps:

1. Click StartStart, type regedit in the Start Search box, and then click regedit in the Programs list.

User If you are prompted for an administrator password or confirmation, type your password or click Continue.

2. Expand the following subkey: HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion Policies
3. Click System, right-click LocalAccountTokenFilterPolicy, and then click Modify.
4. In the Value data box, type 1, and then click OK.

Back to the top

MORE INFORMATION

The LocalAccountTokenFilterPolicy entry in the registry can have a value of 0 or 1. These values change the behavior of the entry as follows:

• 0 = build filtered token. This is the default value. The administrator credentials are removed. These credentials are required for remote administration of the print drivers.
• 1 = build elevated token. This value enables the remote administration of the print drivers on a server within a workgroup.

Back to the top


APPLIES TO
• Windows Vista Enterprise 64-bit edition
• Windows Vista Home Basic 64-bit edition
• Windows Vista Home Premium 64-bit edition
• Windows Vista Ultimate 64-bit edition
• Windows Vista Business
• Windows Vista Business 64-bit edition
• Windows Vista Enterprise
• Windows Vista Home Basic
• Windows Vista Home Premium
• Windows Vista Ultimate

Back to the top

Keywords: 
kbtshoot kbexpertiseinter kbprb KB927832

Back to the top

 

Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
Microsoft Corporation. All rights reserved. Terms of Use | Trademarks


You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

AddThis Social Bookmark Button

Leave a Reply

*
To prove that you're not a bot, enter this code
Anti-Spam Image