How to find who has deleted printers ? Windows server 2003.
Event Type:    Warning
Event Source:    Print
Event Category:    None
Event ID:    4
Date:        8/20/2015
Time:        11:47:25 AM
User:        xxxxxx
Computer:    xxxxxx
Description:
Printer xxxxx  is pending deletion.

Event Type:    Warning
Event Source:    Print
Event Category:    None
Event ID:    8
Date:        8/21/2015
Time:        9:46:51 AM
User:        xxxxxx
Computer:   
Description:
Printer xxxxx was purged.

Event Type:    Warning
Event Source:    Print
Event Category:    None
Event ID:    4
Date:        8/20/2015
Time:        11:47:37 AM
User:        xxxxx
Computer:    xxxxxxx
Description:
Printer xxxxxxx is pending deletion.

Event Type:    Warning
Event Source:    Print
Event Category:    None
Event ID:    4
Date:        8/20/2015
Time:        11:47:43 AM
User:        xx\xxxx
Computer:    xxxxxx
Description:
Printer xxxxxx is pending deletion.

Event Type:    Warning
Event Source:    Print
Event Category:    None
Event ID:    3
Date:        8/20/2015
Time:        11:47:32 AM
User:        xxxxx
Computer:    xxxxxx
Description:
Printer xxxxxx was deleted.

Event Type:    Warning
Event Source:    Print
Event Category:    None
Event ID:    4
Date:        8/20/2015
Time:        11:47:43 AM
User:        xxxxxx
Computer:    xxxxxxx
Description:
Printer xxxxxxxx is pending deletion.

Event Type:    Warning
Event Source:    Print
Event Category:    None
Event ID:    4
Date:        8/20/2015
Time:        11:47:44 AM
User:        xxxx\xxxx
Computer:    xxxxxxx
Description:
Printer xxxxxxx is pending deletion.


Event Type:    Warning
Event Source:    Print
Event Category:    None
Event ID:    3
Date:        8/20/2015
Time:        11:54:40 PM
User:        xxxx\xxxxx
Computer:    xxxxxxxx
Description:
Printer HP LaserJet P4010_P4510 Series PCL 6 was deleted.

Event Type:    Warning
Event Source:    Print
Event Category:    None
Event ID:    3
Date:        8/20/2015
Time:        11:51:46 PM
User:        xxx\xxxxx
Computer:    xxxxxx
Description:
Printer HP LaserJet 4350 PCL 6 (Copy 1) was deleted.

Event Type:    Warning
Event Source:    Print
Event Category:    None
Event ID:    3
Date:        8/20/2015
Time:        11:51:05 PM
User:        xxxxxxx
Computer:    xxxxxxxx
Description:
Printer HP LaserJet 4200 PCL 6 was deleted.

Event Type:    Warning
Event Source:    Print
Event Category:    None
Event ID:    3
Date:        8/20/2015
Time:        1:25:16 PM
User:        NT AUTHORITY\SYSTEM
Computer:    xxxxxxx
Description:
Printer xxxxxx was deleted.

August 24th, 2015 4:03pm

I assume User:        xxxxxxx is not really xxxxxxx. 

Or are you telling us HOW you detect who deletes the printers on 2003?

Free Windows Admin Tool Kit Click here and download it now
August 25th, 2015 12:06am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics