Windows NT Workstation user can still print, but they get access denied when they click Start / Settings / Printers and then double-click a shared network printer icon.
The printer queue that is displayed is empty and the user cannot manage their own print jobs.
One possible cause is that the SMS Installer was used to roll out a product that adds entries to the REG_MULTI_SZ values at:
SMS only distributes the first line of a REG_MULTI_SZ value, thus loosing the additional entries, including SPOOLSS.
The default values for NullSessionPipes are:
The default values for NullSessionShares are:
These values are only used when RestrictNullSessionAccess, a type REG_DWORD is 1 (or missing, as 1 is the default).
Changes to these values are effective immediatley, you do NOT have to restart.