> -----Original Message----- > From: Webster [mailto:[EMAIL PROTECTED] > Subject: RE: Question on Printer creation Auditing > > > -----Original Message----- > > From: Ziots, Edward [mailto:[EMAIL PROTECTED] > > Subject: RE: Question on Printer creation Auditing > > > > Himm which event ID David, I don't see it in my audit logs. I want to > > track down which tech is blowing up my print server so I can drop the > > hammer once and for all. > > Mine shows as 2, 9 and 20. 20 shows the driver being loaded by SYSTEM, > 9 > shows the printer as "set" by the user who installed the printer and 2 > shows > printer as "created" by the installing user . Source is Print for all > three > events. > > This is on my Citrix 4.5 lab running Server 2003 R2.
Server 2008 shows only the event IDs 2 and 9. 9 shows SYSTEM and 2 shows the user who installed the printer. This was on my XenApp 5 lab running pure Server 2008. Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
