Fnprinters.exe does not detect and add network printers, and printer time-outs may occur, when you run Fnprinters.exe on a Windows Server 2003 R2-based computer (912035)


The information in this article applies to:

  • Microsoft Windows Server 2003 R2 Enterprise Edition (32-Bit x86)
  • Microsoft Windows Server 2003 R2 Enterprise x64 Edition
  • Microsoft Windows Server 2003 R2 Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003 R2 Standard x64 Edition
  • Microsoft Windows Server 2003 R2 Datacenter Edition (32-Bit x86)
  • Microsoft Windows Server 2003 R2 Datacenter x64 Edition
Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect your system.
Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry

SYMPTOMS

You run Fnprinters.exe to automatically detect and add network printers to the local print server. When you do this, Fnprinters.exe does not detect and add the network printers. Additionally, printer time-outs may occur. You notice this issue when the local print server is running on a Microsoft Windows Server 2003 R2-based computer.

Note Sometimes, you have to run Fnprinters.exe more than one time to automatically detect network printers.

CAUSE

This issue may occur on networks where Internet Protocol security (IPsec) is applied locally on individual computers in the domain. It may also occur when IPsec is applied as part of the domain's group policies.

Printer time-outs may occur when you run Fnprinters.exe because of the long delay that occurs during IPsec negotiation.

WORKAROUND

Warning This workaround may make your computer or your network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To work around this issue, use one of the following methods:
  • Disable IPsec.

    Warning If you disable IPsec, you will create a severe limitation in security. Use this workaround only for troubleshooting.
  • Turn on IPsec filtering for SNMP traffic. For more information about how to configure network security for SNMP, click the following article number to view the article in the Microsoft Knowledge Base:

    324261 How to configure network security for the SNMP service in Windows Server 2003

  • To avoid printer time-outs, change the registry value that determines the maximum number of concurrent outgoing probe requests, the number of seconds before an outgoing SNMP request times out, and the number of times to retry an SNMP request before giving up. To do this, follow these steps:
    1. Click Start, click Run, type regedit, and then click OK.
    2. Locate and then click the following registry subkey:

      HKEY_CLASSES_ROOT\CLSID\{8FADC6A8-183E-4DFC-944A-84A323334B98}

    3. Increase the default values for the following registry entries:
      • Entry: MaxProbeCount
        Type: REG_DWORD
        Default Value: 256

        This value determines the maximum number of concurrent outgoing probe requests. For example, if you set the value of the MaxProbeCount registry entry to N on a subnet of 1024 computers, the first N requests are sent out quickly. Fnprinters.exe waits for the first of these requests to time out and continues to send out requests more slowly as older requests time out. Therefore, the whole process takes a significantly longer time.
      • Entry: SnmpTimeout
        Type: REG_DWORD
        Default Value: 30

        This value determines the number of seconds before an outgoing SNMP request times out. The default value of 30 seconds is appropriate for most networks.
      • Entry: SnmpRetry
        Type: REG_DWORD
        Default Value: 1

        This value determines the number of times to retry sending an SNMP request before giving up. The default value of 1 is appropriate for most networks.
Modification Type:MajorLast Reviewed:3/15/2006
Keywords:kbwinservnetwork kbFilePrintservices kbtshoot kbprb KB912035 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.