If you have a printer installed on a windows 2003 server, it essentially acts as a file share i.e. \\remotehost\printername$. My question is, if someone remotely mounts that share, and print jobs are being sent to the printer, will people see the print spool files for the qued jobs? What default ACL's are given to a printer (printer share) on a windows server? If I am wrong and it isnt a spool file that is sent to a printer, please correct me and detail what type of file goes from client to the printer? And whether if intercepted this file is readable?

Hi, yes you are correct The default is that everybody can see what is being printed and are in a queue, this link should help; http://support.microsoft.com/kb/290293 Hope it helps.Lewis.j.Routledge

Please start reading it from here. The link describes how the printer works on the network and the architecture basically the client and server process http://technet.microsoft.com/en-us/library/cc783789(v=ws.10).aspx