Himm which event ID David, I don't see it in my audit logs. I want to track down which tech is blowing up my print server so I can drop the hammer once and for all.
Z Edward E. Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP,Security+,Network+,CCA Phone: 401-639-3505 -----Original Message----- From: David Lum [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 08, 2008 11:41 AM To: NT System Admin Issues Subject: RE: Question on Printer creation Auditing Event logs will tell you who created what and when... David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 -----Original Message----- From: Ziots, Edward [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 08, 2008 8:33 AM To: NT System Admin Issues Subject: Question on Printer creation Auditing Importance: High Since it seems I cant get it through to some folks about bad print drivers, and causing print servers to crash. I am in the midst of rebuilding 2 print servers, and I would like to lay down auditing on the printers to who created what and when. Would it be as easy as auditing for certain group the printers key in the registry, or is there more to it, to make sure I track down who updates drivers, or makes a change to a printer on the print servers. Any help or guidance would be helpful. Z Edward E. Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP,Security+,Network+,CCA Phone: 401-639-3505 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
