Home
  •  

Shared Printer: Restart the print spooler and unshare the printer

Microsoft.Windows.Server.6.2.PrintServer.PrintQueue.SharedPrinterAvailability.System.EventCollection.76 (Rule)

Restart the print spooler and unshare the printer.

Knowledge Base article:

Summary

Restart the print spooler and unshare the printer.

Resolutions

To resolve this error, do the following:

Restart the Print Spooler service

To start or restart the Print Spooler service, use the following procedure:

Warning: Restarting the Print Spooler service causes all print jobs to be restarted. After restarting the Print Spooler service, you might need to reset some printers or turn them off and then turn them back on. On an active print server, perform this procedure outside of normal business hours or during scheduled maintenance time, if possible. Before performing this procedure, take all printers offline and wait for all print jobs to be completed, or pause all printers and wait for all Active print jobs to be completed.

In some instances, you might receive Error 1068 ? \The dependency service or group failed to start\ ? when attempting to start the Print Spooler service. This can happen if the Print Spooler service relies on other services that are not running. To resolve this issue, use the following procedure:

Unshare the printer

To unshare the printer, right-click its name in the Printers folder in Control Panel or in Print Management, click Run as administrator, click Sharing, and then clear the Share this printer check box.

To unshare a printer from the Command Prompt window, type the following command, where (printername) is the name of the printer:

Cscript %WINDIR%\system32\Printing_Admin_Scripts\en-US\prncnfg.vbs -t -p \(printername)\ -shared\

If the printer is not properly unshared, this could be because of network problems. Examine any new errors in Event Viewer to determine the underlying problem.

Element properties:

TargetMicrosoft.Windows.Server.6.2.PrintServer.Printer
CategoryAlert
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
Shared Printer Availability Alert
{0}
Event LogMicrosoft-Windows-PrintService/Admin

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.Windows.Server.6.2.PrintServer.PrintQueue.SharedPrinterAvailability.System.EventCollection.76" Enabled="true" Target="Microsoft.Windows.Server.6.2.PrintServer.Printer" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>Alert</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Microsoft-Windows-PrintService/Admin</LogName>

      <Expression>

        <And>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>MatchesRegularExpression</Operator>

              <Pattern>^(371)$</Pattern>

            </RegExExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">Microsoft-Windows-PrintService</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">Params/Param[2]</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">$Target/Property[Type="Microsoft.Windows.Server.6.2.PrintServer.Printer"]/DeviceID$</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="Alert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="Microsoft.Windows.Server.6.2.PrintServer.PrintQueue.SharedPrinterAvailability.System.EventCollection.76.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression/>

    </WriteAction>

  </WriteActions>

</Rule>