{"id":33713,"date":"2024-04-06T10:37:20","date_gmt":"2024-04-06T08:37:20","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=33713"},"modified":"2024-04-07T08:13:07","modified_gmt":"2024-04-07T06:13:07","slug":"windows-server-2019-march-2024-update-kb5035849-prevents-printer-redirection","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2024\/04\/06\/windows-server-2019-march-2024-update-kb5035849-prevents-printer-redirection\/","title":{"rendered":"Windows Server 2019: March 2024 update KB5035849 prevents printer redirection"},"content":{"rendered":"<p><img decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline;\" title=\"Windows\" src=\"https:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2021\/04\/Windows-klein.jpg\" alt=\"Windows\" width=\"200\" align=\"left\" \/>[<a href=\"https:\/\/www.borncity.com\/blog\/2024\/04\/06\/windows-server-2019-mrz-2024-update-kb5035849-verhindert-druckerumleitung\/\" target=\"_blank\" rel=\"noopener\">German<\/a>]I'm posting an issue here in the blog that a reader pointed out to me. The security update KB5035849 released on March 12, 2024 for Windows 10 Enterprise 2019 LTSC and Windows Server 2019 causes printing problems in certain cases. Under Windows Terminal Server, users can no longer print locally to their redirected printers. According to my research, other administrators have also encountered this problem.<\/p>\n<p><!--more--><\/p>\n<h2>Windows Server 2019 Update KB5035849<\/h2>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/vg06.met.vgwort.de\/na\/be1c8e6605bf4807b2f7f70d5eca4989\" alt=\"\" width=\"1\" height=\"1\" \/>Cumulative update <a href=\"https:\/\/support.microsoft.com\/help\/5035849\" target=\"_blank\" rel=\"noopener\">KB5035849<\/a> is only available for Windows 10 2019 Enterprise LTSC and IoT Enterprise LTSC (the remaining variants were removed from the security update supply on May 11, 2021) and Windows Server 2019. This security update makes a number of corrections (including to Active Directory and Windows domains) (see my blog post <a href=\"https:\/\/borncity.com\/win\/2024\/03\/13\/patchday-windows-10-updates-march-12-2024\/\">Patchday: Windows 10-Updates (March 12, 2024)<\/a>). I came across the update here in the blog in connection with an error (see <a href=\"https:\/\/borncity.com\/win\/2024\/03\/13\/windows-10-server-2019-update-kb5035849-fails-with-error-0xd0000034\/\">Windows 10\/Server 2019: Update KB5035849 fails with error 0xd0000034<\/a>).<\/p>\n<h2>Issues with redirected printers<\/h2>\n<p>It appears that the aforementioned March 12, 2024 update to Windows Server 2019 is causing issues with redirected printers in certain environments.<\/p>\n<h3>A reader report on the problem<\/h3>\n<p>A blog reader contacted me directly by email on April 5, 2024 to inform me about a problem (thanks for that) that occurs in his Windows Terminal Server environment. He wrote to me that \"<em>with the March 24 update for servers there is a problem that redirected printers from local to a terminal server can no longer print<\/em>\". The redirected printer is displayed, but a \"handle\" error occurs during the print job.<\/p>\n<p>The above text does not specify which server is involved and the update KB number is also missing. However, the reader wrote: \"There is already a follow-up update, but this does not help.\" He mentioned the update KB5035849, which is the March 2024 security update. My guess is that the reader is referring to the special updates that Microsoft had to release in March to close the LSASS memory leak (see <a href=\"https:\/\/borncity.com\/win\/2024\/03\/23\/windows-server-fix-for-kerberos-lsass-memory-leak-through-march-2024-updates\/\">Windows Server: Fix for (Kerberos) LSASS memory leak through March 2024 updates<\/a>).<\/p>\n<p>The reader wrote to me that he had carried out the measures mentioned in the support article <a href=\"https:\/\/learn.microsoft.com\/en-us\/troubleshoot\/windows-server\/remote\/printer-redirection-not-work\" target=\"_blank\" rel=\"noopener\">Windows Server printer redirection isn't working<\/a> without success. This support article has the revision date Dec. 26, 2023, but refers to Windows Server 2012 R2.<\/p>\n<h3>Further confirmations on the internet<\/h3>\n<p>With the above information, I did a quick search on the Internet overnight and came across the Microsoft Answers forum post <a href=\"https:\/\/answers.microsoft.com\/en-us\/windowserver\/forum\/all\/printer-redirection-not-working-on-my-remote\/731d64a3-9408-49d8-89f5-904145b5b0cf\" target=\"_blank\" rel=\"noopener\">Printer Redirection not working on my remote server<\/a> dated March 22, 2024. The person concerned writes that he operates a broker server \"Windows Server 2019\" and two RDS servers \"Windows Server 2019\".<\/p>\n<p>Since installing the latest Windows Server 2019 updates (March 2024), users are experiencing issues with printer redirection in their Remote Desktop Services (RDS) environment. Users can access desktops and applications normally, but printing from their redirected printers fails. Error messages include \"The handle is invalid\" or connection errors.<\/p>\n<p>The administrator has tried restarting the servers, checking the redirection settings and even uninstalling the updates, but the problem persists. When he accesses his remote admin in admin mode (mstsc \/admin), the redirection printer works fine.<\/p>\n<p>There are some administrators in this forum thread who confirm the errors. The comment by a Microsoft employee that the problem was fixed by the out-of-band update for the memory leak is simply wrong. There is currently no solution or new insight in this thread.<\/p>\n<p>A second Microsoft Answers forum post <a href=\"https:\/\/answers.microsoft.com\/en-us\/windowserver\/forum\/all\/does-anyone-have-problems-printing-from-rdp-after\/6ca546f5-56b0-4f6e-861c-76b9215baf86\" target=\"_blank\" rel=\"noopener\">Does anyone have problems printing from RDP after March 12, 2024 KB5035849 update?<\/a> from March 26, 2024 also falls into the same category. The person concerned writes that he cannot print via RDP after installing KB5035849 from March 12, 2024. He has tried to undo the installation but still has the same problem.<\/p>\n<p>The only fix the affected person found: Rolling back the Server 2019 to a backup before the patchday and blocking the update installation. The affected person writes that the out-of-band update KB5037425 does not help with the above problem. Question in the round: Is anyone else affected? Is there a fix or workaround?<\/p>\n<h2>A workaround from my readers<\/h2>\n<p><strong>Addendum:<\/strong> My German blog reader confirmed the issue and made some proposals in comments. Michel Py <a href=\"https:\/\/www.borncity.com\/blog\/2024\/04\/06\/windows-server-2019-mrz-2024-update-kb5035849-verhindert-druckerumleitung\/#comment-178708\" target=\"_blank\" rel=\"noopener\">wrote<\/a>:<\/p>\n<blockquote><p>A redirected printer means that the local printer driver on the RDS server should be installed dynamically on RDP login. Has the admin tried if it works better with the entry:<\/p>\n<p>RestrictDriverInstallationToAdministrators=0<\/p>\n<p>See Microsoft's support article\u00a0<a href=\"https:\/\/support.microsoft.com\/en-gb\/topic\/kb5005652-manage-new-point-and-print-default-driver-installation-behavior-cve-2021-34481-873642bf-2634-49c5-a23b-6d8e9a302872\" target=\"_blank\" rel=\"noopener\">KB5005652\u2014Manage new Point and Print default driver installation behavior (CVE-2021-34481)<\/a><\/p><\/blockquote>\n<p>Another Michael has answered, that the specific printer driver is not really necessary. The remote desktop print driver is actually responsible for this printing issue. And this is exactly what is causing problems. He did not have this problem with a specific printer driver (the Microsoft universal driver can be deactivated via GPO). With the printer-specific drivers, however, he had all sorts of other problems (settings not accepted, etc.).<\/p>\n<p>So he looked for a workaround and found it in the form of the DLL swap. Michael wrote within <a href=\"https:\/\/www.borncity.com\/blog\/2024\/04\/06\/windows-server-2019-mrz-2024-update-kb5035849-verhindert-druckerumleitung\/#comment-178712\" target=\"_blank\" rel=\"noopener\">this German comment<\/a> (I've translated all comments here) that he has this issue since January 2024. He found the following dll swapping workaround:<\/p>\n<blockquote><p>I am aware of the issue and have had it since the January update. The cause for me is the file <em>mxdwdrv.dll<\/em> in the folder:<\/p>\n<p>c:\\\\windows\\\\system32\\\\\\spool\\\\drivers\\\\x64\\\\3.<\/p>\n<p>If I replace this with the same file from another server (no RDS), everything works again.<\/p>\n<p>The \"broken\" file is 840KB in size, the working file is 880KB.\u00a0The problem reappeared with the March update and I had to replace the file again.<\/p>\n<p>No restart is necessary, neither server nor services. At most a log out and log in again.<\/p>\n<p>Both servers (RDS, as well as the other server from which I have the file) are patched. I have the suspicion it is related to some fix for the PrinterNightmare. Why only RDS is affected, I do not know.<\/p><\/blockquote>\n<p>Maybe the observation and the workaround from Michael can help to solve the issue. I've forwarded it on X to @MicrosoftHelps &#8211; but they told me first to contact the Microsoft support <a href=\"https:\/\/support.microsoft.com\/en-us\/topic\/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2\" target=\"_blank\" rel=\"noopener\">listed here<\/a>, and after I wrote, that I don't have the issue, they shall forward the article link to their product group for investigation, they came back with the request \"to create a Feedback hub entry to \"improve Windows\" &#8211; same bullshit as every time. I then told them to take the link to my blog post here and forward it to the product group or leave it &#8211; that's the Microsoft way to thread it's customers.<\/p>\n<p><strong>Similar articles:<\/strong><br \/>\n<a href=\"https:\/\/borncity.com\/win\/2024\/03\/12\/microsoft-security-update-summary-march-12-2024\/\">Microsoft Security Update Summary (March 12, 2024)<\/a><br \/>\n<a href=\"https:\/\/borncity.com\/win\/2024\/03\/13\/patchday-windows-10-updates-march-12-2024\/\">Patchday: Windows 10-Updates (March 12, 2024)<\/a><br \/>\n<a href=\"https:\/\/borncity.com\/win\/2024\/03\/13\/patchday-windows-11-server-2022-updates-march-12-2024\/\">Patchday: Windows 11\/Server 2022-Updates (March 12, 2024)<\/a><br \/>\n<a href=\"https:\/\/borncity.com\/win\/2024\/03\/13\/windows-server-2012-r2-and-windows-7-server-2008-r2-march-12-2024\/\">Windows Server 2012 \/ R2 and Windows 7 (March 12, 2024)<\/a><br \/>\n<a href=\"https:\/\/borncity.com\/win\/2024\/03\/13\/windows-10-server-2019-update-kb5035849-fails-with-error-0xd0000034\/\">Windows 10\/Server 2019: Update KB5035849 fails with error 0xd0000034<\/a><br \/>\n<a href=\"https:\/\/borncity.com\/win\/2024\/03\/21\/windows-server-march-2024-update-causes-lsass-memory-leak-on-dcs\/\">Windows Server: March 2024 update causes LSASS memory leak on DCs<\/a><br \/>\n<a href=\"https:\/\/borncity.com\/win\/2024\/03\/23\/windows-server-fix-for-kerberos-lsass-memory-leak-through-march-2024-updates\/\">Windows Server: Fix for (Kerberos) LSASS memory leak through March 2024 updates<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]I'm posting an issue here in the blog that a reader pointed out to me. The security update KB5035849 released on March 12, 2024 for Windows 10 Enterprise 2019 LTSC and Windows Server 2019 causes printing problems in certain cases. &hellip; <a href=\"https:\/\/borncity.com\/win\/2024\/04\/06\/windows-server-2019-march-2024-update-kb5035849-prevents-printer-redirection\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[463,22,2],"tags":[47,2851,2850,2236,195,1498],"class_list":["post-33713","post","type-post","status-publish","format-standard","hentry","category-issue","category-update","category-windows","tag-issue","tag-kb5035849","tag-patchday-3-2024","tag-print","tag-update","tag-windows-server-2019"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/33713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=33713"}],"version-history":[{"count":5,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/33713\/revisions"}],"predecessor-version":[{"id":33720,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/33713\/revisions\/33720"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=33713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=33713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=33713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}