What event id triggers when print spooler service get started

Shashikant D 1 Reputation point
2021-10-30T07:04:11.933+00:00

What event id triggers when print spooler service get started

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,659 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Anonymous
    2021-10-30T13:53:31.847+00:00

    There isn't anything native. This tool should work though.
    https://documentation.solarwinds.com/en/success_center/sam/content/sam_documentation.htm

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  2. Limitless Technology 39,796 Reputation points
    2021-11-03T10:42:06.573+00:00

    Hi there,

    It is Event ID 353 — Print Job Status.

    The following table lists events that you should monitor in your environment.
    https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/appendix-l--events-to-monitor

    You can get an additional list from the above link.

    -------------------------------------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept it as an answer--


  3. MotoX80 35,416 Reputation points
    2021-11-03T13:07:23.987+00:00

    From what I have found, on a Windows server OS, you should see event ID 7036 from the Service Control Manager.

    On a desktop OS, like Win10, Windows no longer generates those events. I have no idea why Microsoft chose to do that.

    You can see when the Spooler service was started by using this Powershell script to look at the start time of the process.

    $Spooler = Get-CimInstance -Class Win32_Service -Filter 'Name="spooler"' 
    if ($Spooler.Started -eq 'True') {
        $process = Get-Process -id  $Spooler.ProcessId
        "The Spooler service was started at {0}" -f $process.StartTime 
    } else {
        "The Spooler service is not running."
    }
    
    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.