This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 0%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
Hello everyone,
I'm facing an issue with my Windows 11 machines 22H2/22H3 and a Shared printer installed on a PaperCut on-premises server. I deploy the shared printer via PrintDeploy which is working really great. But the problem I'm facing is for an unknown reason, the laptops will not recognize the Ricoh driver anymore and prompt the user to re-install it. This is happening randomly and I don't know which logs to refer to. When I go to printer properties I got the following message. I don't understand why this prompt appears cause the driver has been installed already but a some point I have to reinstall it. We only using one virtual queue for all printers around our school. I did applied the "Configure RPC connections settings" -> RPC over named pipes policy to my domain but it doesn't seem to fix this issue.
Do you have any recommendation. I'm just lost.
Thank you for your help
Hello,
I checked the logs in Event Viewer and I have the following error in the "Application and Service Logs -> Microsoft -> Windows -> PrintService
Hello everyone,
I did these steps below but i still have issues...
I do have the following error in print service logs...
I really don't know what to do
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 65%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EP%3C/text%3E%3C/svg%3E)
Were you able to resolve this issue? I am seeing the same thing.
Hello PaulG,
I did followed these instructions below and it did solve the problem for most of my laptops
https://call4cloud.nl/allow-users-to-install-printer-drivers/
I did deployed the PS script and create new settings catalog from Intune.
Try and let me know
Good morning everyone,
actually something else come up. My issue is not solved yet but I have more information about it. I've started to audit this folder C:\Windows\System32\spool\drivers\x64\3 cause I've noticed some dll files are deleted from this folder like ps5ui.dll.
I have these 2 events when it happens
It seems these 2 process delete files from the folder mentioned above
Do you have any information I could use about it?
Thanks a lot for your help
Hi @laurent,
I have seen when spoolsv.exe removed the PS5 dlls but we never got to the bottom of the issue.
printisolationhost.exe is the binary called when the jobs are rendered in a sandbox to prevent print spooler crashes.
Does C:\Windows\INF\setupapi.dll on the client show any results for the PS5 core binaries?
PS5 binaries are staged to the Windows driver store. They are in one of the NTPRINT folders.
c:\Windows\system32\DriverStore\FileRepository\ntprint.inf.....
The events you provided are on one of the client systems, correct?
Did you track what Print Deploy client is doing when the file is removed? Look in the Print Deploy client logs and match the time.
Did you start a PaperCut support request? If yes, just send the number, I can track you from there.
Thanks
Hi @Alan,
Thanks a lot for taking your time to help me on this matter.
Do you mean I should take a look in this setupapi.dev.log file to see anything is relevant there? I can upload it if you want to take a look?
I'm not sure I can find anything useful in Print Deploy client logs cause I already had this problem by deploying the print queue via GPO from my on-premise AD. That's why I've decided to try Print Deploy solution but that issues still sticked with me.
I don't know whether it can help but I also have this error in eventvwr
The print spooler failed to load a plug-in module C:\Windows\system32\spool\DRIVERS\x64\3\PS5UI.DLL
This error comes probably because the dll is not present anymore in C:\Windows\System32\spool\drivers\x64\3 but why it gets deleted in first place?
I also changed this settings in Intune which apply to all my hybrid laptops.
And yes the events I have provided come from the clients
I didn't raise a papercut support request as they will ask me to check with my local supplier and I have the feeling is not related with them but with PrintNightmare vulnerability
What do you think about it?
Thanks for your help.
When ps5ui.dll is gone, the driver is NOT installed.
0x7E is ERROR_MOD_NOT_FOUND.
I do not think this is related to the spooler exploit. The spooler has been a nightmare since forever so that was nothing new.
On the clients, killing the print spooler RPC endpoint is perfectly fine.
I was curious if there are any references to ps5ui.dll in setupapi.dev.log. The file is text based. Use notepad.
Does the issue seem to occur after a Windows Update?
There are two main PS files in c:\Windows\System32\spool\drivers\x64\3\
PSCRIPT5.DLL and PS5UI.DLL
The other files are PSCRIPT.HLP, PSCRIPT.NTF, and PSCRPTE.NTF
Are these other files missing as well?
The Ricoh PCL6 driver uses unidrv.dll and unidrvui.dll. Do these files ever disappear?
I like PS best but if the files do not get deleted for unidrv based driver files that may be a safer route.
Yes this issue occurs every time after a Windows update...
PSCRIPT5.DLL and PS5UI.DLL gets deleted but not PSCRIPT.HLP, PSCRIPT.NTF and PSCRPTE.NTF
I don't know about this PCL6 approach cause I don't want to mess around with printer drivers on my PaperCut server anymore. I would like to stick with PS drivers
how about restricting the ACL's?
What do you think about it?
Thank you
Laurent
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 23%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Windows Update might be replacing your custom drivers. Ensure you're using the latest Ricoh drivers compatible with Windows 11.
Under Group Policy:
check the System and Application logs in Event Viewer for any errors related to printing or driver installation.
Thanks a lot. This solution worked fine actually
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 97%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJW%3C/text%3E%3C/svg%3E)
Hello,It is advised to try the following steps to troubleshoot the problem:
How to download and install the latest printer drivers - Microsoft Support
Fix printer connection and printing problems in Windows - Microsoft Support
Windows Logs> System for any errors or warnings associated with printing. Before viewing Logs, enable View > Show Analytic and Debug Logs.
Best regards
Jacen
——————————————————————————————————
If the Answer is helpful, please click "Accept Answer" and upvote it.
Hex Error 35 is decimal 53.
winerror 0x35
53 ERROR_BAD_NETPATH
Most likely the registry for the printer has some driver registry setting that is pathed to an invalid source.
Possibly c:\windows\system32\spool\prtprocs or C:\windows\system32\spool\drivers\color
Look in the registry of the printer on the machine sharing the queue.
Thanks