Re: Audit of specific file(s) being printed
From: Randy Franklin Smith [MVP] (rsmith_at_ultimatewindowssecurity.com)
Date: 01/13/05
- Next message: Randy Franklin Smith [MVP]: "Re: Which accounts are in the Authenticated Users group ?"
- Previous message: Randy Franklin Smith [MVP]: "Re: Internet/Intranet Access"
- In reply to: Tim Jackson: "Audit of specific file(s) being printed"
- Next in thread: Jeff Allen: "Re: Audit of specific file(s) being printed"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 12 Jan 2005 17:28:18 -0800
Unfortunately, no. The input side of printing is an application level
thing, to the OS there's no connection between the source file and it's
being printed. Windows Auditing can tell you when a file is opened for Read
and when a User prints to a printer object but that's it.
-- Regards, Randy Franklin Smith, CISA, SSCP, Security MVP Creator of the Ultimate Windows Security training courses "Tim Jackson" <tim.jackson@amsjv.com> wrote in message news:41e51657$1_1@baen1673807.greenlnk.net... > Is it possible in a Windows 2000 domain to audit when specific files are > printed. I know it is possible to audit all print jobs (as print server > informational level events in the security event log) but we are only > interested in knowing when specific files are printed and searching though > the event log on the print server is very time consuming. Any hints or > help > gratefully received. > >
- Next message: Randy Franklin Smith [MVP]: "Re: Which accounts are in the Authenticated Users group ?"
- Previous message: Randy Franklin Smith [MVP]: "Re: Internet/Intranet Access"
- In reply to: Tim Jackson: "Audit of specific file(s) being printed"
- Next in thread: Jeff Allen: "Re: Audit of specific file(s) being printed"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
