6

I'm building an ASP.NET application that requires printing using PrintDocument method:

PrintDocument.Print()

Printing works properly in development env with IIS express. when publishing it to an intranet IIS server, printing fails, which I think is caused by permission issue for aspnet working process.

I tried to do the following with no success:

  • I created an application pool in integrated pipeline mode for an admin local user with load user profile option set to true
  • I moved the application to the new created application pool
  • I added <identity impersonate="true" username="username" password="*****"/> in web.config file
  • An error appeared stating that: An ASP.NET setting has been detected that does not apply in Integrated managed pipeline mode so I added <validation validateIntegratedModeConfiguration="false"/> to <system.webServer> section.

Any help please?

AlBaraa Sh
  • 2,202
  • 3
  • 20
  • 29
  • Please don't run web apps as local admin, it is real bad for your security and everyone else's once that box gets pwned. – Wyatt Barnett Jan 01 '14 at 16:47
  • You can go directly from RDLC to PDF: [RDLC - Export directly to Excel or PDF from codebehind](http://forums.asp.net/t/1556522.aspx?RDLC+Export+directly+to+Excel+or+PDF+from+codebehind). – Andrew Morton Jan 01 '14 at 16:52

4 Answers4

7

I think you might be misunderstanding some fundamental concepts here. When you use PrintDocument.Print() you are printing on the server. When you deploy your application in IIS this printing will happen on the server computer that is hosting your application. The reason why you thought your code was working in IIS Express is because you were hosting your application on the same computer as the client browser that was testing it. Also you were running your application under your account which had a printer configured.

You cannot print directly to the client computer from a web application. That would be a big security issue. The best you could do is provide some HTML document using a print media CSS type. Then if the user decides, he might print it in his browser.

If on the other hand you want to print on some printer that is attached to your web server, you will need to configure the Application Pool in IIS to run under an identity that has a printer configured in its profile.

Darin Dimitrov
  • 1,023,142
  • 271
  • 3,287
  • 2,928
  • Of course I'm trying to print to a printer configured in the server, not in my local client printer. I tried to do as u said to configured an application pool but it failed. so, how can i do it? – AlBaraa Sh Jan 01 '14 at 16:03
  • Yes, in this case you should configure the Application Pool in IIS to run under an account that has a printer configured. And that you have enabled the load user profile in the properties of this application pool. – Darin Dimitrov Jan 01 '14 at 16:04
  • 1
    I created an application pool for a local admin account, and the load user profile is enabled (=true), but it didn't work. – AlBaraa Sh Jan 01 '14 at 16:07
  • Does the local admin account has a printer configured? – Darin Dimitrov Jan 01 '14 at 16:15
  • Yes, and i tried to do the same printing using IIS express in same machine and it worked – AlBaraa Sh Jan 01 '14 at 16:18
  • IIS Express runs under the account you have used to start Visual Studio. That's the main difference. Normally you should manage to get this working by configuring your Application Pool to run under an account that has a printer configured. – Darin Dimitrov Jan 01 '14 at 16:18
  • I used the same account in application pool also – AlBaraa Sh Jan 01 '14 at 16:19
  • Should i use server name or PrintServerUNCName in printer queue name? – AlBaraa Sh Jan 01 '14 at 16:23
  • Is it a shared printer on the network or a locally attached printer to your web server? – Darin Dimitrov Jan 01 '14 at 16:23
  • But how are you specifying the PDF filename? Normally virtual PDF printers show a Save As dialog asking for the user to input the resulting PDF filename. This obviously cannot work in a web application. – Darin Dimitrov Jan 01 '14 at 16:25
  • I'm printing a local rdlc file, when i print from IIS express to this printer a dialogue appears asking for file name. but from IIS 7 nothing appears. Should I try a normal printer? – AlBaraa Sh Jan 01 '14 at 16:27
  • 1
    Of course that nothing will appear :-) It can't appear. Where did you expect it to appear? There's no UI associated to IIS. This should work with a normal printer. – Darin Dimitrov Jan 01 '14 at 16:28
  • If you are just trying to generate PDFs from RDLC then printing them is the wrong way to go about things -- IIRC the reporting bits can generate PDFs without going through these hoops. – Wyatt Barnett Jan 01 '14 at 16:48
2

Hopefully I am understanding your question correctly, but I just had some confusion myself with this. Our setup at my work is Windows Server 2008 R2 with IIS 7.

We have a print server as well installed on the same box (not sure if it matters as this is not my area of expert).

Basically, viewing the installed printers using, PrinterSettings.InstalledPrinters I was able to see all the printer names installed on the server.

I attach a debugger to the application process to debug and I can just use the debugger to see this, otherwise you will have to run a loop to print through these. If you run this locally, you will see only the printers installed on your machine. If they are network printers, then the full path will be shown. So determine the path/name the server will recognize the printer as and then set that to the printer name explicitly using the,

PrinterSettings.PrinterName property of the PrintDocument class. This worked for me. Also, my application pool identity is set to NetworkService.

eaglei22
  • 2,589
  • 1
  • 38
  • 53
0

I think the original poster has gotten a lot of flack for their question. If you want to generate .PDFs using GhostScript, for example, you install a printer driver and create a printer for it. You can suppress the Saveas() dialog in many languages by providing one ahead of time. This was feasible in earlier versions of IIS (that may have been less secure), but is harder to do in IIS 8.

I think this issue is caused by IIS inhibiting access to the local printer queue. This is either caused by not being in the NT AUTHORITY\INTERACTIVE group at runtime, or because IIS will put the user, (whomever is running the app pool) in two groups: IIS APPPOOL\, and BUILTIN\IIS_IUSRS.

You can validate all this by looking at the thread permissions using a tool like Sys Internal's Process Explorer.

Don
  • 1
  • 2
0

I have faced same issue and I found the following solution and it worked for me.

1 - Go to printer and setting of system  
2 - Select Printer  
3 - Go to Printer Properties  
4 - Security  
5 - Click on Add "IIS AppPool\DefaultAppPool" as object name and click on check name (Default Pool will be your Pool Name)  
6 - Give permission Manage This Printer and Manage Document permission.  
7 - Restart IIS
Paul Karam
  • 4,052
  • 8
  • 30
  • 53
user2092217
  • 1
  • 1