Who printed from what client machine?

[makaiman]

Hello,

I am running Windows 2003 Small Business Server for my business and I'm not a techie, but someone the other day printed a large document of over 100 pages from their machine but I cannot find out from which machine it came from. Can anyone help me find which machine it came from and what are the simple steps to find out on the server? I mean from what client machine it came from?

This is somewhat urgent, and thank you...

 

[nsanto17]

I think you will only be able to tell who printed it if you have print logging turned on.

Everyone else please chime in if i am wrong.

Thanks

 

[makaiman]

How do you initialize or turn on print logging? Please help, and if I do, how can I view history, that is, printing from a client machine a few days ago? I want to go into the server, find the client machine that did this wasteful printing, and locate them.. Thanks so much for your help...

 

[58sniper]

Do you see any event ID 10 entries in the System log? It should show you the user, printer, size (in pages), and document name.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[makaiman]

This is great. So do I go into the event viewer and trace back to say, last Friday when this occured and find Event ID=10? Is that where I go? At first I was going into Server Management, looking at the computers, and going individually down the list to "view event logs" on that specific viewer, but it is so enormous, I am curious as to what to look for in terms of Identifying a log when someone prints. Do I use the event viewer of the server or the client machines?... what ID for printing again?

 

[58sniper]

You'd look at the event log on the print server. Right click on MY COMPUTER>Manage>System Tools>Event Viewer>System.

This is assuming that on that same print server, if you go into Printers>File>Server Properties>Advanced that the LOG SPOOLER INFORMATION EVENTS box is/was checked at that time.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[makaiman]

This is great, so is there an ID attached to the log file? Do I open up printers and faxes folder and go up to file then down to server properties?