The remote printer uninstall steps are as follows:
1. When a session is disconnected or logged off, RDPDR.SYS sends a device removal event to WLNOTIFY.DLL for each client-side printer and port.
2. WLNOTIFY.DLL purges and deletes all queues for its respective session.
RDPDR (RDPDR.SYS) is a KERNEL-mode driver that redirects Terminal Services client-side devices for clients connected to the Terminal Server using the RDP protocol. RDPDR.SYS uses a Virtual Channel in RDP to send print job data from server to client. This is defined by the name “RDPDR”.
RDPDR.SYS is a root-enumerated virtual bus driver that is loaded at boot time by the operating system. A single instance of RDPDR.SYS is shared by all sessions on the TS server. It is the job of RDPDR.SYS to route and redirect I/O requests from a session to the appropriate TS client machine. RDPDR.SYS plays a central part in the overall TS redirection scenario.
When the USER-mode component RDPWSX.DLL notifies RDPDR.SYS of a session connect, RDPDR.SYS initializes itself and waits for device information from the client.
RDPDR.SYS receives from the client a list of client-side devices that meet the redirection criteria. It uses this list to create and register printer port device interfaces, device paths, printer and port announce events to the USER-mode WLNOTIFY.DLL component, and symbolic links.
RDPDR.SYS handles all printer I/O to the client that is sent from the Spooler/USBMON.DLL.
| 