|
Posted by Steven L Umbach on October 23, 2007, 8:20 pm
Please log in for more thread options Hey Dave.
I may have been wrong about application log. I just did a test and found
info in the system log. Below is an example of what I see in my system log
after printing a document. You can use system log filter view
[properties/filter] to see specific events such as those with source
printer. Eventcomb is also another free tool from Microsoft to parse the
logs.
Steve
http://www.microsoft.com/technet/security/prodtech/windows2000/secwin2k/swin2k09.mspx
--- info in this article on how to use Eventcomb
Event Type: Information
Event Source: Print
Event Category: None
Event ID: 10
Date: 10/24/2007
Time: 6:32:40 PM
User: STEVE-XP\Steve
Computer: STEVE-XP
Description:
Document 2, Book1a.xls owned by Steve was printed on hp deskjet 960c via
port LPT1:. Size in bytes: 6556; pages printed: 1
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
"Dave Allen" <*> wrote in message
> ok I enabled logging
> its working now, thankx
>
> One thing that I cannot see is what document was printed?
> I was hoping to get a list of what is being printed.
> The reason why I ask this is often times people print garbage and I want
> to track down who printed the garbage.
>
> Any other ideas?
>
>> You might be able to track it in the application log via Event Viewer. So
>> check there first and if nothing is seen go to Control Panel/printers [do
>> not highlight any printer]/file/server properties - advanced and you will
>> logging items you can enable for print spooler. If you do that be sure to
>> increase the size of the application log substantially from default in
>> it's properties [which would be a good idea in any case]. Start with at
>> least 20 MB.
>>
>> Steve
>>
>>
>>>I was wondering if out of the box windows has any print queue print
>>>tracking capabilities
>>> We do not track printing but every once in a while someone prints out
>>> 100 pages of personal crap
>>> and I want to track down that person
>>> We run windows 2003 standard edition with print queue shares
>>> everyone prints through the server and to a network connected printer
>>> no one prints directly to the printers
>>>
>>> How can I look at who has printed?
>>
>>
| 
XML Sitemap