Unable to access printer queue or printer property when alternative shell is used

David Lechevalier 1

Hey,

When we access a RDP server using an alternate shell, we are not able to access the printer queue using the new Settings panel.
It return a permission denied. This test was done using local administrator

Accessing the printer queue using the control panel (the old way) is possible.

In this exemple, the alternate shell used is explorer. I select it to simplify reproduction steps.
It is configured using this reg file

Windows Registry Editor Version 5.00  
  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\TSAppAllowList\Applications\explorer]  
"CommandLineSetting"=dword:00000001  
"IconIndex"=dword:00000000  
"IconPath"="C:\\Windows\\explorer.exe"  
"Name"="explorer.exe"  
"Path"="C:\\Windows\\explorer.exe"  
"RequiredCommandLine"=""  
"ShortPath"=""  
"ShowInTSWA"=dword:00000000  
"VPath"=""

the mstsc client is started with the extra option

alternate shell:s:explorer

The issue only occurs when client specify the shell to use.
If I put this alternative shell in the registry using HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon: shell=explorer, it works

Did I miss some registry/GPO configuration ?

Thank you for your help

David Lechevalier 1 Reputation point

2022-09-30T09:24:57.067+00:00
Hey guys,

I did additional tests today:

I also have the same issue when I use the group policy Start a program on connection (same behavior with User and Computer) set to explorer.

For the record, it is ok when I set HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon: shell=explorer, in the registry.

When the open queue action works, the command started is "C:\Windows\system32\rundll32.exe" printui.dll,PrintUIEntryDPIAware /o /n "Microsoft Print to PDF"
If I try to start this command in a session when the explorer is override, the printer dialog opens.

It seems the problem is inside the new SystemSettings application.

Is there a way to have logs for this application (C:\Windows\ImmersiveControlPanel\SystemSettings.exe)

Thank you for your help
David.