Link to home
Start Free TrialLog in
Avatar of timabe
timabe

asked on

Event Log Full with odd message

The system portion of the event log is completely full with the following event:

Event Type:      Warning
Event Source:      LPDSVC
Event Category:      None
Event ID:      4007
Date:            12/7/2003
Time:            6:40:28 PM
User:            N/A
Computer:      SERVER
Description:
Illegal format used for commands received from 192.168.2.3 : service refused.

I'm stumped.  Any ideas?
Avatar of shivsa
shivsa
Flag of United States of America image

sounds like  a printer on 192.168.2.3 has a job(s) spooled that's not using the proper LPR format.

clean the spooler out
@echo off
net stop spooler
del %windir%\system32\spool\*.spl /Q
del %windir%\system32\spool\*.shd /Q
net start spooler

and check the printer settings
Avatar of timabe
timabe

ASKER

192.168.2.3 is one of our XP workstations.  I checked for .spl and .shd files and there were none.  The only printer this workstation has installed is on an external print server (192.168.2.200).  I think you are close, but I'm still getting the error.  Any other ideas?
ASKER CERTIFIED SOLUTION
Avatar of chicagoan
chicagoan
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
WHat did you find out?
Avatar of timabe

ASKER

The TCP/IP printing service was running for no reason.  I stopped the service, and the error messages stopped.  Thanks for the help!