Configuration

    Configure print servers in ADAudit Plus

    Add print servers

    Use the product console to add print servers to ADAudit Plus.

    • Log in to the ADAudit Plus web console.
    • Click the Server Audit tab.
    • In Configured Server(s), select Print Server from the drop-down list.
    • Select the required Domain.
    • Click Add Print Servers.
    • In the configuration dialog box, select the print server that you want to audit.
    • Complete the wizard and save the configuration.
    Field What to select or enter
    Primary navigation path Server Audit → Configured Server(s) → Print Server
    Domain The domain containing the target print server
    Action Add Print Servers
    Server selection Choose the Windows print server to audit

    Note In some product areas, ongoing management is available from Configuration → Configured Server(s) → Print Servers. This guide uses the source flow that starts with Server Audit for initial onboarding and Configuration for later management tasks.

    Add or remove individual printers

    After the print server is configured, you can add new printers for auditing or remove printers that no longer need monitoring.

    Add printers

    • Go to Configuration → Configured Server(s) → Print Servers.
    • In the Actions column for the required print server, click the Add new printer for auditing icon.
    • Select the printer or printers to monitor.
    • Save the configuration.

    Remove printers

    • Go to Configuration → Configured Server(s) → Print Servers.
    • In the Actions column for the required print server, click the Remove configured printers icon.
    • Select the printer or printers to remove.
    • Confirm the change.
    Action Navigation path Expected result
    Add printer Configuration → Configured Server(s) → Print Servers → Actions Newly selected printers are added for auditing.
    Remove printer Configuration → Configured Server(s) → Print Servers → Actions Selected printers are removed from ADAudit Plus monitoring.

    Note ADAudit Plus supports both agentless and agent-based event collection for printer auditing.

    Disable or remove print servers

    Disable a print server when you want to pause collection without deleting the configuration. Remove it when you no longer need it in ADAudit Plus.

    Disable a print server

    • Go to Configuration → Configured Server(s) → Print Servers.
    • In the Actions column, click the check mark icon for the required print server.
    • Confirm that the server changes to the disabled state and is shown with a red status icon.

    Remove a print server

    • Go to Configuration → Configured Server(s) → Print Servers.
    • In the Actions column, click the delete icon for the required print server.
    • Confirm permanent removal.
    Action Use this when Result
    Disable You want to stop collection temporarily Configuration remains available for later reuse.
    Remove You no longer need the print server in ADAudit Plus The server is permanently removed from the configured list.

    Configure the event fetch interval and mode

    Choose the collection mode that matches your environment and reporting needs.

    • Go to Configuration → Configured Server(s) → Print Servers.
    • Locate the required print server.
    • In the Event Fetch Interval column, select the required mode.
    • If you select Schedule, configure the collection interval.
    • Save the change.
    Field Value
    Navigation path Configuration → Configured Server(s) → Print Servers
    Configurable column Event Fetch Interval
    Modes available Real-time, Schedule, Print Listener
    Extra input for Schedule Set the desired polling interval

    Mode comparison:

    Mode How collection works When to use it Limitation
    Real-time Reads print events continuously from Event Viewer Use for near-immediate log-based collection Requires access to the PrintService Operational log
    Schedule Reads print events from Event Viewer at the configured interval Use when a controlled polling window is preferred Delayed visibility until the next polling cycle
    Print Listener Reads the print queue using the Windows API when a print job starts Use for queue-triggered collection No branch office direct print support

    Important To audit branch office direct printing, set the mode to Real-time or Schedule. Do not use Print Listener.

    Verify the configuration

    Verify event log settings on the print server

    Use Event Viewer to confirm that the print server is writing the required events.

    • Sign in to the print server.
    • Open Event Viewer.
    • Go to Application and Services Logs → Microsoft → Windows → PrintService → Operational.
    • Confirm that the Operational log is enabled.
    • Generate a small test print job.
    • Refresh the log and confirm that new entries appear.

    Verify print events in Event Viewer

    Use Event ID 307 as the primary validation checkpoint for a successful print job, and Event ID 805 to confirm job rendering diagnostics (such as copy count) are also being captured.

    • Generate a test print job from a client that uses the monitored print server.
    • On the print server, open Event Viewer → Application and Services Logs → Microsoft → Windows → PrintService → Operational.
    • Filter or search for Event ID 307, then Event ID 805.
    • Open each event and verify the details — 307 for the user, printer, and document name where applicable; 805 for the copy count and render diagnostics (Copies, Color, XRes/YRes, Quality).
    • If you are using Print Listener mode, also confirm that the print job is visible in the Windows print queue when initiated.
    Validation point Expected result
    Event ID 307 present The print server is logging completed print jobs.
    Event ID 805 present The print server is logging job rendering diagnostics, including copy count.
    Document name present The update and GPO setting for job names are working.
    Queue visibility for Print Listener The print job is visible when the job is initiated.

    Verify data in ADAudit Plus reports

    After the event exists on the print server, confirm that ADAudit Plus has collected and displayed it.

    • Wait for the configured collection cycle:
    • Real-time: Allow a short processing interval.
    • Schedule: Wait for the next scheduled poll.
    • Print Listener: Confirm that the listener captured the initiated job.
    • Open the printer audit reporting area in ADAudit Plus.
    • Filter by the test user, printer, or recent time range.
    • Confirm that the print job appears with the expected details.
    • If the record does not appear, use Troubleshooting.

      Tip Keep a simple validation worksheet with the test user, printer, document name, time sent, mode used, and whether Event ID 307 and the ADAudit Plus report both showed the event.