Solved

2003 server sbs - standard version

Posted on 2009-07-14
13
286 Views
Last Modified: 2012-05-07
Hello

I have a 2003 sbs server -- standard version -- with a printer that i share out and added with the wizard

How do i get print to show up in the event viewer -- so i can see who printed -- I tried tunring on auditing??

So I want to see who printed on the print server i event viewer?!!

Thanks
0
Comment
Question by:independencetech
  • 4
  • 4
  • 3
  • +1
13 Comments
 
LVL 3

Expert Comment

by:SirTKC
ID: 24856046
What you're asking is much more sophisticated then what Event Viewer can handle.

I suggest that you choose a third party app. to perform this task in a more detailed way and professional approach.

Please see this solution
http://www.redline-software.com/eng/products/pam/

There's many other options available on the market but this one is quiet neat.

Also, If I may suggest, please leave the event viewer as light as possible and use it to ensure your server is stable by monitoring key information stacked into it.

Hope it help.
0
 
LVL 6

Expert Comment

by:naughtynat
ID: 24858926
I believe that Event Viewer can handle these sorts of requests but this might only be in a Terminal Server environment (only place that I have seen it used).
0
 
LVL 3

Expert Comment

by:SirTKC
ID: 24859638
The event viewer in a Terminal environment will only show created printers (or failed created printers).
You cannot use the event viewer to keep track of who print what, when, where and how much.
You must use a third party application to perform this kind of monitoring. It,ll be much more powerfull and versatile
0
 
LVL 6

Expert Comment

by:naughtynat
ID: 24865802
Well I think you might be able to.

Depends on exactly what you want to track etc.

But you can track what was printed, by whom, on what printer etc.

Please see attached document of Event 10 for Printing.

I assume this is what you are after but let me know if its not.
Printing-in-TS.doc
0
 

Author Comment

by:independencetech
ID: 24883262
naughtynat:                    yes that is what i am talking about how do i do that
0
 
LVL 6

Expert Comment

by:naughtynat
ID: 24885823
I will have to have a play and let you know. I have only done with on TS so will have to try a few things with SBS and see if I can replicate.
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 
LVL 3

Expert Comment

by:SirTKC
ID: 24885935
Well, I will keep an eye on this one. ;-)

I knew that you can do it by using TS. But not in a normal domain networking environment.
That's the reason why there is so many third party applications for monitoring printing actions.

Standing by!

Cheers
0
 
LVL 6

Expert Comment

by:Asif Bacchus
ID: 24892624
3rd party apps will give you more info but depending on how you are sharing the printer the Event Log will give you basic information.  How is your printer connected?  Is it networked (ie. ethernet connection) and using a TCP port or directly connected to the server (parallel or USB)?  If so, then check the server's system log for EventID 10 which is a print job.  If it is connected to a client computer and being shared from there then try the event logs on the client.

Need more info on how the printer is setup.
0
 

Author Comment

by:independencetech
ID: 24900280
oh that looks good but how do i create a new event filter without using the current ones like system -- can i create a new one call it printer and have it filter for event id 10
0
 
LVL 3

Expert Comment

by:SirTKC
ID: 24900513
May I ?

The time you will spend collecting, compiling and analyzing the data (only if you can) does not worth the solutions available out there. Think about it...

Good luck inde !
0
 
LVL 6

Accepted Solution

by:
naughtynat earned 500 total points
ID: 24901026
Yes as SirTKC has been saying all along, 3rd part app best option.

I suppose the real question is why do you want to audit this? How much time do you have to do this? And how many users on the network?

You could just go into event viewer, right click, new event log, then go into its properties and set event id 10 as to be filters by.

Might save you a few bucks up front but will probably cost you a lot more in the long run.
0
 
LVL 6

Expert Comment

by:Asif Bacchus
ID: 24901071
I agree -- 3rd party apps (likely even some free ones) will give you more detail and flexibility versus the Event Log.  I only pointed out EventID 10 since it answered your original question of using the Event Log to monitor print jobs.  I agree with everyone else though, Event Log will not let you analyze or otherwise track any real details.
0
 

Author Closing Comment

by:independencetech
ID: 31603570
Just wanted to know how -- i realize the3rd party app might be better -- but i cannot purchase  that.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

The problem of the system drive in SBS 2003 getting full continues to be an issue, even though SBS 2008 and SBS 2011 are both in the market place.  There are several solutions to this, including adding additional drive space or using third party uti…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now