Print Register

In the Enterprise versions, print log recording is available.
Practically any print job sent to any printer (including virtual printers) can be logged.
The log provides the following details:
-
Original PC
-
User who generated the print
-
Source file (file title only)
-
Destination port (destination file if virtual printer, e.g., PDF)
Print logging is not enabled by default on any client. The following operations must be performed:
Event Log
From the left-hand menu, navigate to:
Application and Service Logs > Microsoft > Windows > PrintService > Operational

Right-click and select Enable Log.
This operation can also be managed via GPO:
Hive: HKEY_LOCAL_MACHINE
Key Path: SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PrintService/Operational
Value Name: Enabled
Value Type: REG_DWORD
Value Data: 00000001

REGISTRY (System Registry)
Go to the Computer folder\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT
​
​
CREATE the Key “Printers”

Then create the ShowJobTitleInEventLogs entry (New > DWORD (32-bit) Value).


This key is used to record the title of the document sent to print (otherwise the field will remain empty).
​
It is recommended to configure this key via GPO, so it can be distributed across all machines.

Print logging will start on client computers after they have received the new Group Policy settings and have been rebooted.