Audit of specific file(s) being printed

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Is it possible in a Windows 2000 domain to audit when specific files are
printed. I know it is possible to audit all print jobs (as print server
informational level events in the security event log) but we are only
interested in knowing when specific files are printed and searching though
the event log on the print server is very time consuming. Any hints or help
gratefully received.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Unfortunately, no. The input side of printing is an application level
thing, to the OS there's no connection between the source file and it's
being printed. Windows Auditing can tell you when a file is opened for Read
and when a User prints to a printer object but that's it.

--
Regards,
Randy Franklin Smith, CISA, SSCP, Security MVP
Creator of the Ultimate Windows Security training courses

"Tim Jackson" <tim.jackson@amsjv.com> wrote in message
news:41e51657$1_1@baen1673807.greenlnk.net...
> Is it possible in a Windows 2000 domain to audit when specific files are
> printed. I know it is possible to audit all print jobs (as print server
> informational level events in the security event log) but we are only
> interested in knowing when specific files are printed and searching though
> the event log on the print server is very time consuming. Any hints or
> help
> gratefully received.
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Tim Jackson wrote:
> Is it possible in a Windows 2000 domain to audit when specific files
are
> printed. I know it is possible to audit all print jobs (as print
server
> informational level events in the security event log) but we are only
> interested in knowing when specific files are printed and searching
though
> the event log on the print server is very time consuming. Any hints
or help
> gratefully received.

I use O&K Print Watch - http://www.prnwatch.com/

it will show you the documents being printed and who is printing them.

I have found it very handy and is a reasonable price. Maybe give the
demo a shot and see if it works out for you.

Jeff