I was hoping that it might be as easy as making an adjustment in DCOMCNFG which is how you set the security for the COM EXE. I think I have the same identical entries for the ASPNET user, IWAM(asp), and IUSR(asp)but the asp users may require more...?
>Then IF CAPABLE you have to look options like removing SET PRINTER TO and >REPORT FORM to separated COM EXE (when ASP) and see if this works OR if NOT >CAPABLE messing with the PDF printer security policy.