asked on

Windows Server 2008 R2 log spooler events

On Server 2008 I could right click in the Printers window and get into Server Properties for the print server. Here I could check a box to log the print spooler events so that all print jobs are logged. Where is this in Server 2008 R2?

Justin Owens

"I believe the logging/auditing is enabled by default. Purely a hunch as I have no reference material to back that up, but I did compare the settings on a 2008 server box with a R2 box and they are indeed different. Anyway, on the R2 server, look in the Event Viewer under Applications and Services Logs/Microsoft/Windows/PrintService. You might also find this article about the new features in Print Management helpful: http://technet.microsoft.com/en-us/library/dd878502%28WS.10%29.aspx "

Source: http://social.technet.microsoft.com/Forums/en/windowsserver2008r2general/thread/0e1b61be-80c4-426f-82b6-bd4f742367c3

Justin

ASKER CERTIFIED SOLUTION

Stussyexpert

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Loveparteek Tiwana

Beside just enabling it you can query your event view to gather print job history. Below command works on server 2012. It queries windows event viewer for event id 307 and extracts the information and saves it to printerjobs.csv file. You may need to adjust the properties.

Try this:

Get-WinEvent -FilterHashtable @{LogName='Microsoft-Windows-PrintService/Operational';Id=307} | Select-Object -Property TimeCreated, @{Label='PrinterName';Expression={$_.Properties[4].Value}}, @{Label='UserName';Expression={$_.Properties[2].Value}}, @{Label='ClientName';Expression={$_.properties[3].value} }, @{Label='PrinterFQDN';Expression={$_.properties[5].value} }, @{Label='JobSize (Bytes)';Expression={$_.Properties[6].Value}}, @{Label='NoOfPages';Expression={$_.Properties[7].Value}} | Export-Csv printerjobs.csv -NoTypeInformation

Open in new window

https://clunite.com