auditing of print jobs in event log

[Richard Darling]

My Event Log on SBS 4.5 shows all successful print jobs, and I would like to no longer audit these jobs, but only audit unsuccesful print jobs. I assumed that I could go to the Printer Auditing box and remove the checkmark from the "Success" selection on the Print event. However, none of the printers have anyone entered in the name list, so therefore the events to audit are not checked, and grayed out because no one is selected.

Any help appreciated...
RD

[Martin Schmidt_2]

Hello Richard,

maybe there is a setting in the User Manager.
Check the menu "Policies" -> Audit.
Anything set here. Disable it.

I hope this helps.
Regards, Martin.

[Richard Darling]

Hi Martin,
I should have noted that I have two events setup for "Failure" auditing in the Audit Policy; "Login and Logoff" and "File and Object Access". The "Login and Logoff" is working properly. I was wondering if there is anything in the SBS that would override the Audit Policy?

[Martin Schmidt_2]

Hi Richard,

I have researched all our Microsoft internal databases. There is absolutely nothing SBS specific.

Printer auditing is enabled (as in NT) via Printer Properties and User Manager. The one that has be selected/deselected is "File and Object Access).

Maybe you should disable all auditing just as a test and reboot the server. If still auditing, update the printer driver or reinstall the printer (if it is just for a specific one). Further you can reinstall the Service Pack.

Maybe another 3rd party software influencing the behaviour (File & Print Services for NetWare, Fax Software etc.).

Sorry, but problem seems to be unknown.

Regards, Martin.

[Enes Dizdarevic · Accepted solution]

By default, Windows NT Server logs every print job processed by the server in the System Log. To change logging options:
Select Start then Settings then Printers
From the File menu select Server Properties
Choose the Advanced tab
Select the desired logging options then choose OK

[Richard Darling]

Thanks to both of you for the responses...Enes'es answer took care of it. I was looking at the individual printers...didn't realize that there was a global server setting for all printers.
RD