5

I need to log all printed documents with their contents. I've enabled "Keep printed documents" in the relevant printers' properties. Now, I'm trying to prevent users from removing jobs from the printer queue.

I've been trying to implement this by changing the permissions of C:\windows\system32\spool\PRINTERS by denying "delete" permissions for the target user account, but without success.

Does what I'm trying to do make sense? Is it possible?

Improve this question
8
  • local or shared printers?
    – BlueCompute
    Jun 22, 2015 at 8:43
  • @BlueCompute local
    – Josh
    Jun 22, 2015 at 8:45
  • Also note that using third party solutions is not an option. My workplace is as strict about comercial licensing as it is stingy. There is no chance of convincing them to pay for more software.
    – Josh
    Jun 22, 2015 at 8:57
  • Be much easier if you pushed everything through a central printserver.
    – BlueCompute
    Jun 22, 2015 at 9:00
  • 1
    As far as I know a Windows print server does not have an archiving option. Possibly you could write something like a powershell script or small C# service monitoring the spool directory for changes (copying new files to an archiving location). Is it possible this simplification would serve your need instead? serverfault.com/questions/144679/…
    – ErikE
    Jun 22, 2015 at 9:02

1 Answer 1

Reset to default
0

You need to expand & clarify your question a bit more as you can tell from all these questions in the comments. I agree with @KonradGajewski; if you go to Printer Properties (I'm on Win7), on Security tab you have a bit of control over local shared printers. Sadly it appears Print rights allows users to cancel ones on jobs (search 'Permissions): https://msdn.microsoft.com/en-us/library/bb727107.aspx

I'm guessing there is no easy way to stop user from canceling/deleting their own jobs. It does seem a task scheduler script copying files elsewhere is your best bet. If you're just wanting accountability, you can get a log from enabling Event Viewer->Application and Server Logs->Microsoft->Microsoft->Windows->PrintService, right-click Operational, Enable Log

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .