Deployed Printers using GPO, now getting Spooler Supsystem Access Violation

March 31, 2008

So when ever anyone logs into their machine (WInXP SP1, WInXP SP2, Win

Vista, Win2003 Server, they all get a Spooler Subsystem Error.

This happened after I set up some printers to be deployed via Group Policy.

I deployed several Pinters and tested them and they all print fine. So I

deleted the Originals that were installed.

In some cases the user has to manually restart the spooler service, though

most of the time printing continues as normal

All of the Printers that are deployed are on a Win2008 32bit server.

Below is the info on the Crash.

Thanks,

szAppName : spoolsv.exe szAppVer : 5.2.3790.3959

szModName : localspl.dll szModVer : 5.2.3790.3959 offset : 00024193

- - - - - - - - -

spoolsv.exe.hdmp

- - - - - - - - -

This dump file has an exception of interest stored in it.

The stored exception information can be accessed via .ecxr.

(4c4.3d0): Access violation - code c0000005 (first/second chance not

available)

eax=00000000 ebx=80070000 ecx=c0000005 edx=00000000 esi=00000730

edi=00000000

eip=7c8285ec esp=02869738 ebp=028697a8 iopl=0 nv up ei ng nz ac pe

cy

cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000

efl=00000297

ntdll!KiFastSystemCallRet:

7c8285ec c3 ret

- - - - - - - - -

appcompat.txt

- - - - - - - - -

<?xml version="1.0" encoding="UTF-16"?>

<MATCHING_FILE NAME="advapi32.dll" SIZE="618496" CHECKSUM="0xD62FB0BA"

BIN_FILE_VERSION="5.2.3790.3959" BIN_PRODUCT_VERSION="5.2.3790.3959"

PRODUCT_VERSION="5.2.3790.3959" FILE_DESCRIPTION="Advanced Windows 32 Base

API" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®

Operating System" FILE_VERSION="5.2.3790.3959 (srv03_sp2_rtm.070216-1710)"

ORIGINAL_FILENAME="advapi32.dll" INTERNAL_NAME="advapi32.dll"

VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004"

VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x979F6"

LINKER_VERSION="0x50002" UPTO_BIN_FILE_VERSION="5.2.3790.3959"

UPTO_BIN_PRODUCT_VERSION="5.2.3790.3959" LINK_DATE="02/17/2007 13:59:02"

UPTO_LINK_DATE="02/17/2007 13:59:02" VER_LANGUAGE="English (United States)

[0x409]" />

<MATCHING_FILE NAME="gdi32.dll" SIZE="282624" CHECKSUM="0x5CE4B6C7"

BIN_FILE_VERSION="5.2.3790.4033" BIN_PRODUCT_VERSION="5.2.3790.4033"

PRODUCT_VERSION="5.2.3790.4033" FILE_DESCRIPTION="GDI Client DLL"

COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®

Operating System" FILE_VERSION="5.2.3790.4033 (srv03_sp2_gdr.070228-0030)"

ORIGINAL_FILENAME="gdi32" INTERNAL_NAME="gdi32" LEGAL_COPYRIGHT="© Microsoft

VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32"

PE_CHECKSUM="0x537F8" LINKER_VERSION="0x50002"

UPTO_BIN_FILE_VERSION="5.2.3790.4033"

UPTO_BIN_PRODUCT_VERSION="5.2.3790.4033" LINK_DATE="03/02/2007 06:38:46"

UPTO_LINK_DATE="03/02/2007 06:38:46" VER_LANGUAGE="English (United States)

[0x409]" />

<MATCHING_FILE NAME="kernel32.dll" SIZE="1037824" CHECKSUM="0xA3D04897"

BIN_FILE_VERSION="5.2.3790.4062" BIN_PRODUCT_VERSION="5.2.3790.4062"

PRODUCT_VERSION="5.2.3790.4062" FILE_DESCRIPTION="Windows NT BASE API Client

DLL" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®

Operating System" FILE_VERSION="5.2.3790.4062 (srv03_sp2_gdr.070417-0203)"

ORIGINAL_FILENAME="kernel32" INTERNAL_NAME="kernel32" LEGAL_COPYRIGHT="©

VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2"

MODULE_TYPE="WIN32" PE_CHECKSUM="0x1083FC" LINKER_VERSION="0x50002"

UPTO_BIN_FILE_VERSION="5.2.3790.4062"

UPTO_BIN_PRODUCT_VERSION="5.2.3790.4062" LINK_DATE="04/18/2007 16:25:36"

UPTO_LINK_DATE="04/18/2007 16:25:36" VER_LANGUAGE="English (United States)

[0x409]" />

<MATCHING_FILE NAME="ntdll.dll" SIZE="765440" CHECKSUM="0xF198129"

BIN_FILE_VERSION="5.2.3790.3959" BIN_PRODUCT_VERSION="5.2.3790.3959"

PRODUCT_VERSION="5.2.3790.3959" FILE_DESCRIPTION="NT Layer DLL"

COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®

Operating System" FILE_VERSION="5.2.3790.3959 (srv03_sp2_rtm.070216-1710)"

ORIGINAL_FILENAME="ntdll.dll" INTERNAL_NAME="ntdll.dll" LEGAL_COPYRIGHT="©

VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2"

MODULE_TYPE="WIN32" PE_CHECKSUM="0xBD6F9" LINKER_VERSION="0x50002"

UPTO_BIN_FILE_VERSION="5.2.3790.3959"

UPTO_BIN_PRODUCT_VERSION="5.2.3790.3959" LINK_DATE="02/17/2007 14:02:00"

UPTO_LINK_DATE="02/17/2007 14:02:00" VER_LANGUAGE="English (United States)

[0x409]" />

<MATCHING_FILE NAME="ole32.dll" SIZE="1267200" CHECKSUM="0x8A88C6B2"

BIN_FILE_VERSION="5.2.3790.3959" BIN_PRODUCT_VERSION="5.2.3790.3959"

PRODUCT_VERSION="5.2.3790.3959" FILE_DESCRIPTION="Microsoft OLE for Windows"

COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®

Operating System" FILE_VERSION="5.2.3790.3959 (srv03_sp2_rtm.070216-1710)"

ORIGINAL_FILENAME="OLE32.DLL" INTERNAL_NAME="OLE32.DLL" LEGAL_COPYRIGHT="©

VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2"

MODULE_TYPE="WIN32" PE_CHECKSUM="0x14357B" LINKER_VERSION="0x50002"

UPTO_BIN_FILE_VERSION="5.2.3790.3959"

UPTO_BIN_PRODUCT_VERSION="5.2.3790.3959" LINK_DATE="02/17/2007 14:01:09"

UPTO_LINK_DATE="02/17/2007 14:01:09" VER_LANGUAGE="English (United States)

[0x409]" />

<MATCHING_FILE NAME="oleaut32.dll" SIZE="553984" CHECKSUM="0x7485B5CF"

BIN_FILE_VERSION="5.2.3790.4202" BIN_PRODUCT_VERSION="5.2.3790.4202"

PRODUCT_VERSION="5.2.3790.4202" COMPANY_NAME="Microsoft Corporation"

FILE_VERSION="5.2.3790.4202" INTERNAL_NAME="OLEAUT32.DLL"

VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2"

MODULE_TYPE="WIN32" PE_CHECKSUM="0x96543" LINKER_VERSION="0x50002"

UPTO_BIN_FILE_VERSION="5.2.3790.4202"

UPTO_BIN_PRODUCT_VERSION="5.2.3790.4202" LINK_DATE="12/13/2007 07:49:29"

UPTO_LINK_DATE="12/13/2007 07:49:29" VER_LANGUAGE="English (United States)

[0x409]" />

<MATCHING_FILE NAME="shell32.dll" SIZE="8360448" CHECKSUM="0x9CEECD4"

BIN_FILE_VERSION="6.0.3790.4184" BIN_PRODUCT_VERSION="6.0.3790.4184"

PRODUCT_VERSION="6.00.3790.4184" FILE_DESCRIPTION="Windows Shell Common Dll"

COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®

Operating System" FILE_VERSION="6.00.3790.4184 (srv03_sp2_gdr.071106-1258)"

ORIGINAL_FILENAME="SHELL32.DLL" INTERNAL_NAME="SHELL32" LEGAL_COPYRIGHT="©

VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2"

MODULE_TYPE="WIN32" PE_CHECKSUM="0x7FA6F5" LINKER_VERSION="0x50002"

UPTO_BIN_FILE_VERSION="6.0.3790.4184"

UPTO_BIN_PRODUCT_VERSION="6.0.3790.4184" LINK_DATE="11/07/2007 13:49:28"

UPTO_LINK_DATE="11/07/2007 13:49:28" VER_LANGUAGE="English (United States)

[0x409]" />

<MATCHING_FILE NAME="user32.dll" SIZE="583680" CHECKSUM="0x44D95093"

BIN_FILE_VERSION="5.2.3790.4033" BIN_PRODUCT_VERSION="5.2.3790.4033"

PRODUCT_VERSION="5.2.3790.4033" FILE_DESCRIPTION="Windows USER API Client

DLL" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®

Operating System" FILE_VERSION="5.2.3790.4033 (srv03_sp2_gdr.070228-0030)"

ORIGINAL_FILENAME="user32" INTERNAL_NAME="user32" LEGAL_COPYRIGHT="©

VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2"

MODULE_TYPE="WIN32" PE_CHECKSUM="0x91402" LINKER_VERSION="0x50002"

UPTO_BIN_FILE_VERSION="5.2.3790.4033"

UPTO_BIN_PRODUCT_VERSION="5.2.3790.4033" LINK_DATE="03/02/2007 06:38:46"

UPTO_LINK_DATE="03/02/2007 06:38:46" VER_LANGUAGE="English (United States)

[0x409]" />

<MATCHING_FILE NAME="wininet.dll" SIZE="824832" CHECKSUM="0x6A5A486"

BIN_FILE_VERSION="7.0.6000.16608" BIN_PRODUCT_VERSION="7.0.6000.16608"

PRODUCT_VERSION="7.00.6000.16608" FILE_DESCRIPTION="Internet Extensions for

Win32" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Windows® Internet

Explorer" FILE_VERSION="7.00.6000.16608 (vista_gdr.071204-1500)"

ORIGINAL_FILENAME="wininet.dll" INTERNAL_NAME="wininet.dll"

VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004"

VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xCA879"

LINKER_VERSION="0x60000" UPTO_BIN_FILE_VERSION="7.0.6000.16608"

UPTO_BIN_PRODUCT_VERSION="7.0.6000.16608" LINK_DATE="12/07/2007 08:12:33"

UPTO_LINK_DATE="12/07/2007 08:12:33" VER_LANGUAGE="English (United States)

[0x409]" />

<MATCHING_FILE NAME="winsock.dll" SIZE="2864" CHECKSUM="0x73AE8088"

BIN_FILE_VERSION="3.10.0.103" BIN_PRODUCT_VERSION="3.10.0.103"

PRODUCT_VERSION="3.10" FILE_DESCRIPTION="Windows Socket 16-Bit DLL"

COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows

Operating System" FILE_VERSION="3.10" ORIGINAL_FILENAME="WINSOCK.DLL"

1981-1996" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x10001"

VERFILETYPE="0x2" MODULE_TYPE="WIN16" S16BIT_DESCRIPTION="BSD Socket API for

Windows" S16BIT_MODULE_NAME="WINSOCK" UPTO_BIN_FILE_VERSION="3.10.0.103"

UPTO_BIN_PRODUCT_VERSION="3.10.0.103" VER_LANGUAGE="English (United States)

[0x409]" />

</EXE>

<MATCHING_FILE NAME="localspl.dll" SIZE="342016" CHECKSUM="0x5E9D6160"

BIN_FILE_VERSION="5.2.3790.3959" BIN_PRODUCT_VERSION="5.2.3790.3959"

PRODUCT_VERSION="5.2.3790.3959" FILE_DESCRIPTION="Local Spooler DLL"

COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®

Operating System" FILE_VERSION="5.2.3790.3959 (srv03_sp2_rtm.070216-1710)"

ORIGINAL_FILENAME="localspl.dll" INTERNAL_NAME="localspl.dll"

VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004"

VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x594DF"

LINKER_VERSION="0x50002" UPTO_BIN_FILE_VERSION="5.2.3790.3959"

UPTO_BIN_PRODUCT_VERSION="5.2.3790.3959" LINK_DATE="02/17/2007 13:59:53"

UPTO_LINK_DATE="02/17/2007 13:59:53" VER_LANGUAGE="English (United States)

[0x409]" />

</EXE>

</DATABASE>

- - - - - - - - -

manifest.txt

- - - - - - - - -

Server=watson.microsoft.com

UI LCID=1033

Flags=1671504

Brand=WINDOWS

TitleName=Spooler SubSystem App

DigPidRegPath=HKLM\Software\Microsoft\Windows

NT\CurrentVersion\DigitalProductId

ErrorText=This error occurred on 3/31/2008 at 10:29:00 AM.

HeaderText=Spooler SubSystem App encountered a problem and needed to close.

Stage1URL=/StageOne/spoolsv_exe/5_2_3790_3959/localspl_dll/5_2_3790_3959/00024193.htm

Stage2URL=/dw/stagetwo.asp?szAppName=spoolsv.exe&szAppVer=5.2.3790.3959&szModName=localspl.dll&szModVer=5.2.3790.3959&offset=00024193

DataFiles=C:\DOCUME~1\SCOTTT~1\LOCALS~1\Temp\2\WER07b1.dir00\spoolsv.exe.mdmp|C:\DOCUME~1\SCOTTT~1\LOCALS~1\Temp\2\WER07b1.dir00\appcompat.txt

Heap=C:\DOCUME~1\SCOTTT~1\LOCALS~1\Temp\2\WER07b1.dir00\spoolsv.exe.hdmp

ErrorSubPath=spoolsv.exe\5.2.3790.3959\localspl.dll\5.2.3790.3959\00024193

DirectoryDelete=C:\DOCUME~1\SCOTTT~1\LOCALS~1\Temp\2\WER07b1.dir00

April 1, 2008

RE: Deployed Printers using GPO, now getting Spooler Supsystem Access Violation

Hello,

Thank you for your post.

Please note the spooler crash issue is related to kernel crash. I suggest

you contact Microsoft CSS (CUSTOMER SERVICE AND SUPPORT), which is the best

resource to analyze the memory dump file and locate the root cause.

To obtain the phone numbers for specific technology request please take a

look at the web site listed below:

http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS

If you are outside the US please see http://support.microsoft.com for

regional support phone numbers.

Besides, the following are some general information for your reference.

There are many reasons which might cause the Spooler Supsystem Error. For

example, the default local port monitor is changed by a third-party

program.

You could have a try first with the following steps to fix the problem.

As serious problems might occur if you modify the registry incorrectly,

please refer to the following KB article to back up the registry before you

modify it:

How to back up and restore the registry in Windows

http://support.microsoft.com/kb/322756/en-us

1. Start Registry Editor on the server where the printers are shared.

2. Locate the Local Port value under the following key in the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Local

Port

3. Double-click the Driver subkey, and then edit the value. Change the

string value to Localspl.dll, and then click OK.

4. Check the following registry key for third-party print providers. Remove

any non-default print providers:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Providers

The default print providers are:

Internet Print Provider

LanMan Print Services

5. Check the following registry key for third-party print processors.

Remove any non-default print processors:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windo

ws NT x86\Print Processors

The default print processor is:

WinPrint

To find out what printer is using the print processor, use the Microsoft

Product Support Reporting Tool (MPS_REPORTS) tool to open

MachineName_PRINTDRIVERS.TXT, and then search for the third-party print

processor and for the queues that are using the print processor.

6. Change the third-party print processor to WinPrint.

a. Click Start, point to Settings, and then click Control Panel.

b. Double-click Printers, right-click the printer, and then click

Properties.

c. On the Advanced tab, click Print Processor.

d. In the Print Processor box, click WinPrint.

e. Click OK two times.

7. Quit Registry Editor.

If the above method doesn't help, please contact to CSS for further

investigation.

Thanks for your understanding and hope you have a nice day.

Sincerely,

Neo Zhu,

Microsoft Online Support

Microsoft Global Technical Support Center

Get Secure! - http://www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

Sign In

Deployed Printers using GPO, now getting Spooler Supsystem Access Violation

Recommended Posts

Guest Scott Townsend

Popular Days

Popular Days

Guest Jian-Ping Zhu [MSFT]

Browse

Activity

Site Info