I need to find out when a .jpg file was printed to a local printer for legal
reasons.

I know the file was printed from a specific PC to it's local HP ink jet
printer. The .jpg was received via e-mail (outlook) and we know it was
printed, however, we must prove when it was printed.

I had a look in the event viewer, but couldn’t see any entries.

There must be a way to find out, windows must at some point make a spool
file which gets deleted after it prints. Surely there is a way to recover
these spool files and then work out which one is which and look at the file
creation dates.

If anyone has any ideas, please help!!

Spool files are temporary files placed in Virtual Memory (Page files, and
formerly Swap Files) using RAM and are automatically deleted upon
completion of the job. No luck on any files being stored any place.
--
XP - WNP
Today is the first day of the
rest of your life.


"James Slack UK" wrote:

> I need to find out when a .jpg file was printed to a local printer for legal
> reasons.
>
> I know the file was printed from a specific PC to it's local HP ink jet
> printer. The .jpg was received via e-mail (outlook) and we know it was
> printed, however, we must prove when it was printed.
>
> I had a look in the event viewer, but couldn’t see any entries.
>
> There must be a way to find out, windows must at some point make a spool
> file which gets deleted after it prints. Surely there is a way to recover
> these spool files and then work out which one is which and look at the file
> creation dates.
>
> If anyone has any ideas, please help!!
>

Thanks for the reply, but are you sure there is no way of getting it back. I
have seen software that can recover data off of formatted hard disks, not to
mention deleted files.

Though, if the virtual mem is not on hard disk the you cant restore it!

I really need to be 100% sure, I don't mind paying a professional service to
do this. I just can't believe that an XP machine keeps no trail of what it
prints and when.

"Byte" wrote:

> Spool files are temporary files placed in Virtual Memory (Page files, and
> formerly Swap Files) using RAM and are automatically deleted upon
> completion of the job. No luck on any files being stored any place.
> --

To complete your personal 100% satisfaction, call a local Computer repair
shop and ask one of the technicians if he/she knows any way to recall/
list previous print jobs anywheres within your system. There are 3rd
party apps on the market that will do just that for commercial purposes
but as far as XP goes, no dice.
--
XP - WNP
Today is the first day of the
rest of your life.


"James Slack UK" wrote:

> Thanks for the reply, but are you sure there is no way of getting it back. I
> have seen software that can recover data off of formatted hard disks, not to
> mention deleted files.
>
> Though, if the virtual mem is not on hard disk the you cant restore it!
>
> I really need to be 100% sure, I don't mind paying a professional service to
> do this. I just can't believe that an XP machine keeps no trail of what it
> prints and when.
>
> "Byte" wrote:
>
> > Spool files are temporary files placed in Virtual Memory (Page files, and
> > formerly Swap Files) using RAM and are automatically deleted upon
> > completion of the job. No luck on any files being stored any place.
> > --
>

In printer Properties, Advanced, one can enable "Keep printed jobs". Then
the jobs will not be deleted until manually deleting.

The spooler logs failure notifications in the system event log. One can
also enable informational notifications so successful print operations are
logged.

Open the printers and faxes folder, File , Server properties, Advanced.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

"Byte" <Byte@discussions.microsoft.com> wrote in message
news:8F63F426-D3DD-4386-8B00-317E6F796EE4@microsoft.com...
> Spool files are temporary files placed in Virtual Memory (Page files, and
> formerly Swap Files) using RAM and are automatically deleted upon
> completion of the job. No luck on any files being stored any place.
> --
> XP - WNP
> Today is the first day of the
> rest of your life.
>
>
> "James Slack UK" wrote:
>
>> I need to find out when a .jpg file was printed to a local printer for
>> legal
>> reasons.
>>
>> I know the file was printed from a specific PC to it's local HP ink jet
>> printer. The .jpg was received via e-mail (outlook) and we know it was
>> printed, however, we must prove when it was printed.
>>
>> I had a look in the event viewer, but couldn't see any entries.
>>
>> There must be a way to find out, windows must at some point make a spool
>> file which gets deleted after it prints. Surely there is a way to recover
>> these spool files and then work out which one is which and look at the
>> file
>> creation dates.
>>
>> If anyone has any ideas, please help!!
>>