Hi All,
Got a strange one here, long story short we have some students/pcs in the school that are able to print to a networked (cable) printer that they should not be able to access, details.
Printer: HP MFP M476DN
Security Settings: Staff/Network Admin groups only
Group Policy Printer: set to only about 5 pc's which are staff pc's and inaccessible to students.
All web services are turned off on printer like cloud printing etc.
There seems to be no logs of these pc's/students even printing to this printer from within our print manager program, it only shows the staff prints.
The only way we have tracked down the pc's that were used was due to one of the documents had a students name on it, so we looked through the logs and have narrowed it down to possibly only one room being able to print to it. I logged onto these pc's as the student we think was able to print and it does not show the printer anywhere in "Devices and Printers".
I have also set up a Syslog server for that printer to send to but it does not give any info on which user is printing.
Any ideas on how to track and figure this out?
If you want more info let me know, i have tried to be as in depth as i see is needed.
Also looked in Smoothwall as a off chance, did a report on that student. The only thing we found was a https address with the ip of the printer and at the end something like "openapi", cant remember exactly and cant find it again at the moment. We followed the link but it was invalid through web browser.
Thanks.