No Permission Info when disabling Print Spooler Service

Jan 19, 2015 at 10:05 AM
Hi,

I have disabled the Print Spooler Service on my server and afterwards the Permission Info is not created anymore!? I use WinAudit 3.0.11

Any ideas?

br
Anja
Coordinator
Jan 20, 2015 at 2:46 PM
Hi Anja,

Yes, that is correct, that is how the spooler works. In order to get printer permissions, it is first necessary to identify the installed printers.
This OS functionality is part of winspool library. In particular, a call is made to EnumPrinters, see
http://msdn.microsoft.com/en-us/library/windows/desktop/dd162692%28v=vs.85%29.aspx. Disabling the spooler means this API is not available. If you
disable the spooler, then in WinAudit start the logger (Help->Start Logging) then run the audit you will see just below the message "Start Category Permissions",
there is error number 1722, which is RPC Server Not Available, in other words the spooler is not available. If you want the printer pernissions you will need to
enable the spooler service.

oldbury