Solution:
Root Cause: Remote Procedure Call (RPC) Authentication Isolation Failure The Print Spooler service relies on the Remote Procedure Call (RPC) subsystem (
rpcss.exe) and DCOM infrastructure. If RPC endpoints are blocked by local security policies, modified security descriptors on the
spoolss pipe, or mismatched RPC authentication requirements post-hardening, Windows 11 returns 'RPC Server Unavailable' and marks drivers offline.
Diagnostic Verification: Open PowerShell and query RPC service status: Copy
powershell
Get-Service RpcSs, RpcEptMapper | Select-Object Name, Status
Test RPC connection locally: Copy
powershell
Test-NetConnection -ComputerName localhost -Port 135
Step-by-Step Fix: 1 Verify and fix RPC services startup configuration:
Open Command Prompt as Administrator and run: Copy
cmd
sc config RpcSs start= auto
sc config RpcEptMapper start= auto
sc config spooler start= auto
2 Configure RPC Spooler Pipe Authentication via Registry:
Open regedit and navigate to: HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC
Set RpcUseNamedPipesProc (DWORD) to 1. Set RpcAuthentication (DWORD) to 0 (or 2 if domain environment requires strict RPC encryption). 3 Reset Security Descriptors on Spooler folder:
Run in Admin PowerShell: Copy
powershell
icacls "C:\Windows\System32\spool" /reset /t /c /l /q
4 Reboot the system to commit RPC endpoint registrations.
Prevention & Long-Term Monitoring: Audit Group Policy Objects (GPOs) restricting RPC named pipes across client workstations.