Blog Post

Ask the Directory Services Team
7 MIN READ

A Print Nightmare Artifact - krbtgt/NT Authority

jessev's avatar
jessev
Icon for Microsoft rankMicrosoft
Mar 02, 2023
Hello! This is Jessev from the Directory Services team with some advice on how to deal with an annoyance created by the print spooler service. We, on the Direcory Service team, tend to see this issue...
Updated Mar 03, 2023
Version 3.0
trytogetitdone's avatar
trytogetitdone
Copper Contributor
Apr 12, 2024

Hi jessev,

and all of you in the same situation - preparing rollout of Win11 and have a lot of active Win10 😉

Did some tests with the new GPOs mentioned above ( ONLY for Win11 !!!)

– Computer Configuration, Policies, Admin Templates, Printers - Configure RPC connection settings:

  Option: Protocol to use for outgoing RPC connections: - set to: RPC over TCP

  Option: Use authentication for outgoing RPC connections - set to: Authentication disabled!
(to avoid the bug of these thread)


Although this is a standard policy from MS unfortunately this is NOT working for Win10 !

You must use the RegValue: RpcNamedPipeAuthentication.

This is funny because nobody can see this in the Information of the Policy - not mentioned that it only works for Win11 and so leaving us in the wrong assumption, that setting the Computer-GPO would work for all the Computers out there 😉

More funny 😞 the RpcNamedPipeAuthentication seems to work for the Win11 too - strange ...