Windows Print Job Logging

From Michael's Information Zone
Revision as of 10:31, 26 June 2019 by Michael.mast (talk | contribs) (Created page with "==Enabling Printer Auditing via GPO== It appears that to enable print logging, using the built in logging function, you have to edit the registry to #Enable the log<ref>https:...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Enabling Printer Auditing via GPO

It appears that to enable print logging, using the built in logging function, you have to edit the registry to

  1. Enable the log[1]
  2. Tell the system the log exists.[2]



The following edits and additions are needed

  1. Update the following to 1 (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft \Windows\CurrentVersion\WINEVT\Channels \Microsoft-Windows-PrintService/Operational, entry Enabled)
  2. Create the following key (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Microsoft-Windows-PrintService/Operational)



Windows comes with an operational entry in event viewer for the Microsoft-Windows-PrintService event sub directory. However it gets overwritten with whatever you put into the key that you create. Not sure how it associates the key to print services since every other application has an operational entry, and the location of the key does not seem to corresponding to a particular service.

[3]