Windows NT Workstation user can still print, but they get access denied when they click Start / Settings / Printers and then double-click a shared network printer icon.

The printer queue that is displayed is empty and the user cannot manage their own print jobs.

One possible cause is that the SMS Installer was used to roll out a product that adds entries to the REG_MULTI_SZ values at:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlset\Services\LanmanServer\Parameters\NullSessionShares

             and/or

HKEY_LOCAL_MACHINE\SYSTEM\ CurrentControlset\Services\LanmanServer\Parameters\NullSessionPipes

SMS only distributes the first line of a REG_MULTI_SZ value, thus loosing the additional entries, including SPOOLSS.

When rolling out a package with SMS, use an external utility (like REG or Reg) to edit REG_MULTI_SZ values, by using the Execute Program item in the SMS Installer.

Note:

The default values for NullSessionPipes are:

COMNAP
COMNODE
SQL\QUERY
SPOOLSS
LLSRPC
EPMAPPER
LOCATOR

The default values for NullSessionShares are:

COMCFG
DFS$

These values are only used when RestrictNullSessionAccess, a type REG_DWORD is 1 (or missing, as 1 is the default).

Changes to these values are effective immediatley, you do NOT have to restart.