Re: Print tracking

Hey Dave.

I may have been wrong about application log. I just did a test and found
info in the system log. Below is an example of what I see in my system log
after printing a document. You can use system log filter view
[properties/filter] to see specific events such as those with source
printer. Eventcomb is also another free tool from Microsoft to parse the
logs.

Steve

http://www.microsoft.com/technet/security/prodtech/windows2000/secwin2k/swin2k09.mspx
--- info in this article on how to use Eventcomb

Event Type: Information
Event Source: Print
Event Category: None
Event ID: 10
Date: 10/24/2007
Time: 6:32:40 PM
User: STEVE-XP\Steve
Computer: STEVE-XP
Description:
Document 2, Book1a.xls owned by Steve was printed on hp deskjet 960c via
port LPT1:. Size in bytes: 6556; pages printed: 1

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


"Dave Allen" <*> wrote in message
news:ekaHpyYFIHA.284@xxxxxxxxxxxxxxxxxxxxxxx
ok I enabled logging
its working now, thankx

One thing that I cannot see is what document was printed?
I was hoping to get a list of what is being printed.
The reason why I ask this is often times people print garbage and I want
to track down who printed the garbage.

Any other ideas?

"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:eKk8sYRFIHA.4544@xxxxxxxxxxxxxxxxxxxxxxx
You might be able to track it in the application log via Event Viewer. So
check there first and if nothing is seen go to Control Panel/printers [do
not highlight any printer]/file/server properties - advanced and you will
logging items you can enable for print spooler. If you do that be sure to
increase the size of the application log substantially from default in
it's properties [which would be a good idea in any case]. Start with at
least 20 MB.

Steve


"Dave Allen" <nomail@xxxxxxxxxx> wrote in message
news:uAaimnQFIHA.3400@xxxxxxxxxxxxxxxxxxxxxxx
I was wondering if out of the box windows has any print queue print
tracking capabilities
We do not track printing but every once in a while someone prints out
100 pages of personal crap
and I want to track down that person
We run windows 2003 standard edition with print queue shares
everyone prints through the server and to a network connected printer
no one prints directly to the printers

How can I look at who has printed?




.

Relevant Pages

  • Re: Systray Notification Icons Dont Load
    ... Were there no entries in the System log? ... Event Source: McLogEvent ... Event Type: Warning ... see Help and Support Center at ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: SOS! IIS Stopped working completely!
    ... > DLL, copying over new DLL, installing new DLL ... > Event Type: Error ... > Event Source: DCOM ... > when I try to load test.asp, I get the DCOM error in system log. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: SOS! IIS Stopped working completely!
    ... > DLL, copying over new DLL, installing new DLL ... > Event Type: Error ... > Event Source: DCOM ... > when I try to load test.asp, I get the DCOM error in system log. ...
    (microsoft.public.inetserver.iis)
  • Re: SOS! IIS Stopped working completely!
    ... > DLL, copying over new DLL, installing new DLL ... > Event Type: Error ... > Event Source: DCOM ... > when I try to load test.asp, I get the DCOM error in system log. ...
    (microsoft.public.inetserver.asp.general)
  • SQL Server cluster errors
    ... Event Type: Error ... Event Source: MSSQL$SQL ... Looked at the system log to see if there are any errors, ... From some research came to know that this might be because of network ...
    (microsoft.public.sqlserver.clustering)