Difference between revisions of "Windows Print Job Logging"

From Michael's Information Zone
Jump to navigation Jump to search
(Created page with "==Enabling Printer Auditing via GPO== It appears that to enable print logging, using the built in logging function, you have to edit the registry to #Enable the log<ref>https:...")
 
(No difference)

Latest revision as of 11:31, 26 June 2019

Enabling Printer Auditing via GPO

It appears that to enable print logging, using the built in logging function, you have to edit the registry to

  1. Enable the log[1]
  2. Tell the system the log exists.[2]



The following edits and additions are needed

  1. Update the following to 1 (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft \Windows\CurrentVersion\WINEVT\Channels \Microsoft-Windows-PrintService/Operational, entry Enabled)
  2. Create the following key (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Microsoft-Windows-PrintService/Operational)



Windows comes with an operational entry in event viewer for the Microsoft-Windows-PrintService event sub directory. However it gets overwritten with whatever you put into the key that you create. Not sure how it associates the key to print services since every other application has an operational entry, and the location of the key does not seem to corresponding to a particular service.

[3]