Code: Select all
%UserProfile%\RDP6https://technet.microsoft.com/en-us/sys ... nitor.aspx
Universal Printer (1 in 100) fails to transfer to client
Re: Universal Printer (1 in 100) fails to transfer to client
If I remember correctly, the file is being generated in
If you want to monitor everything, Process Monitor is great for that - though you might need filter a lot and it can be a difficult tool to use:
https://technet.microsoft.com/en-us/sys ... nitor.aspx
https://technet.microsoft.com/en-us/sys ... nitor.aspx
Re: Universal Printer (1 in 100) fails to transfer to client
I am working one right now where the Session has PDFs in the folder however the timed process in svcr.exe is not testing this session. Attached is the process monitor log where the PDF is created, but never transferred because svcr.exe is not testing that session.
Which leads me to question. If our admin user profile folder is not in the same place as our normal user profile folder will that cause an issue?
"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"11:53:07.5004495 AM","svcr.exe","5284","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:53:07.5007009 AM","svcr.exe","5284","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:53:07.5014803 AM","svcr.exe","5284","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Create, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Created"
"11:53:07.5015729 AM","svcr.exe","5284","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:53:10.1902457 AM","svcr.exe","4340","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:53:10.1902747 AM","svcr.exe","4340","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:53:07 AM, LastWriteTime: 3/7/2017 11:53:07 AM, ChangeTime: 3/7/2017 11:53:07 AM, FileAttributes: D"
"11:53:10.1902886 AM","svcr.exe","4340","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:53:10.7921437 AM","pdfwriter1.exe","11508","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662%03d.pdf","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:53:10.8633846 AM","CustExt.exe","4812","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Desired Access: Generic Read/Write, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: 0, OpenResult: Created"
"11:53:10.8636321 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 0, Length: 9, Priority: Normal"
"11:53:10.8637196 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 9, Length: 6, Priority: Normal"
"11:53:10.8637873 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 15, Length: 245, Priority: Normal"
"11:53:10.8638487 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 260, Length: 19, Priority: Normal"
"11:53:10.8639575 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 279, Length: 172, Priority: Normal"
"11:53:10.8640219 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 451, Length: 69, Priority: Normal"
"11:53:10.8640862 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 520, Length: 66, Priority: Normal"
"11:53:10.8641227 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 586, Length: 41, Priority: Normal"
"11:53:10.8642365 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 627, Length: 30"
"11:53:10.8642511 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 657, Length: 30"
"11:53:10.8642775 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 687, Length: 329"
"11:53:10.8642950 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 1,016, Length: 217"
"11:53:10.8643100 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 1,233, Length: 200"
"11:53:10.8643373 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 1,433, Length: 7,310, Priority: Normal"
"11:53:10.8643898 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 8,743, Length: 1,513"
"11:53:10.8644830 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,256, Length: 207"
"11:53:10.8645118 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,463, Length: 60"
"11:53:10.8645238 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,523, Length: 5"
"11:53:10.8645348 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,528, Length: 5"
"11:53:10.8645510 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,533, Length: 20"
"11:53:10.8645675 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,553, Length: 20"
"11:53:10.8645831 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,573, Length: 20"
"11:53:10.8646001 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,593, Length: 20"
"11:53:10.8646154 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,613, Length: 20"
"11:53:10.8646328 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,633, Length: 20"
"11:53:10.8646497 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,653, Length: 20"
"11:53:10.8646662 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,673, Length: 20"
"11:53:10.8646825 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,693, Length: 20"
"11:53:10.8647288 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,713, Length: 20"
"11:53:10.8647528 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,733, Length: 20"
"11:53:10.8647775 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,753, Length: 20"
"11:53:10.8647937 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,773, Length: 20"
"11:53:10.8648137 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,793, Length: 20"
"11:53:10.8648410 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,813, Length: 20"
"11:53:10.8648582 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,833, Length: 20"
"11:53:10.8649089 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,853, Length: 125"
"11:53:10.8649214 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,978, Length: 22"
"11:53:10.8649360 AM","CustExt.exe","4812","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS",""
"11:54:30.2776393 AM","svcr.exe","18404","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:54:30.2776730 AM","svcr.exe","18404","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:53:10 AM, LastWriteTime: 3/7/2017 11:53:10 AM, ChangeTime: 3/7/2017 11:53:10 AM, FileAttributes: D"
"11:54:30.2776868 AM","svcr.exe","18404","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:54:31.9608565 AM","svcr.exe","3100","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:54:31.9608819 AM","svcr.exe","3100","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:53:10 AM, LastWriteTime: 3/7/2017 11:53:10 AM, ChangeTime: 3/7/2017 11:53:10 AM, FileAttributes: D"
"11:54:31.9608945 AM","svcr.exe","3100","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:54:32.4137636 AM","pdfwriter1.exe","12296","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784%03d.pdf","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:54:32.4564943 AM","CustExt.exe","14460","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Desired Access: Generic Read/Write, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: 0, OpenResult: Created"
"11:54:32.4566947 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 0, Length: 9, Priority: Normal"
"11:54:32.4568115 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 9, Length: 6, Priority: Normal"
"11:54:32.4568786 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 15, Length: 245, Priority: Normal"
"11:54:32.4569217 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 260, Length: 19, Priority: Normal"
"11:54:32.4570258 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 279, Length: 172, Priority: Normal"
"11:54:32.4570875 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 451, Length: 69, Priority: Normal"
"11:54:32.4571435 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 520, Length: 66, Priority: Normal"
"11:54:32.4571772 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 586, Length: 41, Priority: Normal"
"11:54:32.4572887 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 627, Length: 30"
"11:54:32.4573025 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 657, Length: 30"
"11:54:32.4573158 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 687, Length: 329"
"11:54:32.4573281 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 1,016, Length: 217"
"11:54:32.4573464 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 1,233, Length: 200"
"11:54:32.4574100 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 1,433, Length: 7,310, Priority: Normal"
"11:54:32.4574794 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 8,743, Length: 1,513"
"11:54:32.4575705 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,256, Length: 207"
"11:54:32.4575999 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,463, Length: 60"
"11:54:32.4576129 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,523, Length: 5"
"11:54:32.4576247 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,528, Length: 5"
"11:54:32.4576399 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,533, Length: 20"
"11:54:32.4576567 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,553, Length: 20"
"11:54:32.4576715 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,573, Length: 20"
"11:54:32.4576872 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,593, Length: 20"
"11:54:32.4577028 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,613, Length: 20"
"11:54:32.4577197 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,633, Length: 20"
"11:54:32.4577367 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,653, Length: 20"
"11:54:32.4577525 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,673, Length: 20"
"11:54:32.4577689 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,693, Length: 20"
"11:54:32.4577855 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,713, Length: 20"
"11:54:32.4578015 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,733, Length: 20"
"11:54:32.4578173 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,753, Length: 20"
"11:54:32.4578334 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,773, Length: 20"
"11:54:32.4578497 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,793, Length: 20"
"11:54:32.4578650 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,813, Length: 20"
"11:54:32.4578800 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,833, Length: 20"
"11:54:32.4579347 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,853, Length: 125"
"11:54:32.4579482 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,978, Length: 22"
"11:54:32.4579618 AM","CustExt.exe","14460","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS",""
"11:55:25.0924298 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\desktop.ini","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Sequential Access, Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:55:26.3109698 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\desktop.ini","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Sequential Access, Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:55:26.3165459 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:55:26.3165645 AM","explorer.exe","15744","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:54:32 AM, LastWriteTime: 3/7/2017 11:54:32 AM, ChangeTime: 3/7/2017 11:54:32 AM, FileAttributes: D"
"11:55:26.3165736 AM","explorer.exe","15744","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:55:26.5485679 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Synchronize, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:55:26.5486013 AM","explorer.exe","15744","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:54:32 AM, LastWriteTime: 3/7/2017 11:54:32 AM, ChangeTime: 3/7/2017 11:54:32 AM, FileAttributes: D"
"11:55:26.5486221 AM","explorer.exe","15744","NotifyChangeDirectory","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","CANCELLED","Filter: FILE_NOTIFY_CHANGE_DIR_NAME"
"11:55:26.5488907 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Synchronize, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:55:26.5489210 AM","explorer.exe","15744","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:54:32 AM, LastWriteTime: 3/7/2017 11:54:32 AM, ChangeTime: 3/7/2017 11:54:32 AM, FileAttributes: D"
"11:55:26.5489396 AM","explorer.exe","15744","NotifyChangeDirectory","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","CANCELLED","Filter: FILE_NOTIFY_CHANGE_FILE_NAME, FILE_NOTIFY_CHANGE_ATTRIBUTES, FILE_NOTIFY_CHANGE_LAST_WRITE"
"11:55:26.5539178 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:55:26.5539509 AM","explorer.exe","15744","QueryRemoteProtocolInformation","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","INVALID PARAMETER",""
"11:55:26.5539652 AM","explorer.exe","15744","QueryDirectory","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","0: ., 1: .., 2: prints662001.pdf, 3: prints784001.pdf"
"11:55:26.5540695 AM","explorer.exe","15744","QueryDirectory","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","NO MORE FILES",""
"11:55:26.5540903 AM","explorer.exe","15744","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:55:26.5650357 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Attributes, Read Control, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:55:26.5650728 AM","explorer.exe","15744","QueryRemoteProtocolInformation","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","INVALID PARAMETER",""
"11:55:26.5650946 AM","explorer.exe","15744","QuerySecurityFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Information: Owner, DACL"
"11:55:26.5651244 AM","explorer.exe","15744","QueryNameInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Name: \Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting"
"11:55:26.5653633 AM","explorer.exe","15744","QueryRemoteProtocolInformation","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","INVALID PARAMETER",""
"11:55:26.5653833 AM","explorer.exe","15744","QuerySecurityFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Information: Owner, Group, DACL"
"11:55:26.5654005 AM","explorer.exe","15744","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:54:32 AM, LastWriteTime: 3/7/2017 11:54:32 AM, ChangeTime: 3/7/2017 11:54:32 AM, FileAttributes: D"
"11:55:26.5654370 AM","explorer.exe","15744","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:55:26.5662899 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Attributes, Read Control, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:55:26.5663255 AM","explorer.exe","15744","QueryRemoteProtocolInformation","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","INVALID PARAMETER",""
"11:55:26.5663486 AM","explorer.exe","15744","QuerySecurityFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Information: Owner, DACL"
"11:55:26.5663794 AM","explorer.exe","15744","QueryNameInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Name: \Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting"
"
Which leads me to question. If our admin user profile folder is not in the same place as our normal user profile folder will that cause an issue?
"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"11:53:07.5004495 AM","svcr.exe","5284","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:53:07.5007009 AM","svcr.exe","5284","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:53:07.5014803 AM","svcr.exe","5284","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Create, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Created"
"11:53:07.5015729 AM","svcr.exe","5284","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:53:10.1902457 AM","svcr.exe","4340","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:53:10.1902747 AM","svcr.exe","4340","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:53:07 AM, LastWriteTime: 3/7/2017 11:53:07 AM, ChangeTime: 3/7/2017 11:53:07 AM, FileAttributes: D"
"11:53:10.1902886 AM","svcr.exe","4340","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:53:10.7921437 AM","pdfwriter1.exe","11508","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662%03d.pdf","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:53:10.8633846 AM","CustExt.exe","4812","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Desired Access: Generic Read/Write, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: 0, OpenResult: Created"
"11:53:10.8636321 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 0, Length: 9, Priority: Normal"
"11:53:10.8637196 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 9, Length: 6, Priority: Normal"
"11:53:10.8637873 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 15, Length: 245, Priority: Normal"
"11:53:10.8638487 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 260, Length: 19, Priority: Normal"
"11:53:10.8639575 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 279, Length: 172, Priority: Normal"
"11:53:10.8640219 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 451, Length: 69, Priority: Normal"
"11:53:10.8640862 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 520, Length: 66, Priority: Normal"
"11:53:10.8641227 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 586, Length: 41, Priority: Normal"
"11:53:10.8642365 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 627, Length: 30"
"11:53:10.8642511 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 657, Length: 30"
"11:53:10.8642775 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 687, Length: 329"
"11:53:10.8642950 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 1,016, Length: 217"
"11:53:10.8643100 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 1,233, Length: 200"
"11:53:10.8643373 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 1,433, Length: 7,310, Priority: Normal"
"11:53:10.8643898 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 8,743, Length: 1,513"
"11:53:10.8644830 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,256, Length: 207"
"11:53:10.8645118 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,463, Length: 60"
"11:53:10.8645238 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,523, Length: 5"
"11:53:10.8645348 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,528, Length: 5"
"11:53:10.8645510 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,533, Length: 20"
"11:53:10.8645675 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,553, Length: 20"
"11:53:10.8645831 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,573, Length: 20"
"11:53:10.8646001 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,593, Length: 20"
"11:53:10.8646154 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,613, Length: 20"
"11:53:10.8646328 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,633, Length: 20"
"11:53:10.8646497 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,653, Length: 20"
"11:53:10.8646662 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,673, Length: 20"
"11:53:10.8646825 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,693, Length: 20"
"11:53:10.8647288 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,713, Length: 20"
"11:53:10.8647528 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,733, Length: 20"
"11:53:10.8647775 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,753, Length: 20"
"11:53:10.8647937 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,773, Length: 20"
"11:53:10.8648137 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,793, Length: 20"
"11:53:10.8648410 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,813, Length: 20"
"11:53:10.8648582 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,833, Length: 20"
"11:53:10.8649089 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,853, Length: 125"
"11:53:10.8649214 AM","CustExt.exe","4812","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS","Offset: 10,978, Length: 22"
"11:53:10.8649360 AM","CustExt.exe","4812","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints662001.pdf","SUCCESS",""
"11:54:30.2776393 AM","svcr.exe","18404","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:54:30.2776730 AM","svcr.exe","18404","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:53:10 AM, LastWriteTime: 3/7/2017 11:53:10 AM, ChangeTime: 3/7/2017 11:53:10 AM, FileAttributes: D"
"11:54:30.2776868 AM","svcr.exe","18404","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:54:31.9608565 AM","svcr.exe","3100","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:54:31.9608819 AM","svcr.exe","3100","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:53:10 AM, LastWriteTime: 3/7/2017 11:53:10 AM, ChangeTime: 3/7/2017 11:53:10 AM, FileAttributes: D"
"11:54:31.9608945 AM","svcr.exe","3100","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:54:32.4137636 AM","pdfwriter1.exe","12296","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784%03d.pdf","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:54:32.4564943 AM","CustExt.exe","14460","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Desired Access: Generic Read/Write, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: 0, OpenResult: Created"
"11:54:32.4566947 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 0, Length: 9, Priority: Normal"
"11:54:32.4568115 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 9, Length: 6, Priority: Normal"
"11:54:32.4568786 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 15, Length: 245, Priority: Normal"
"11:54:32.4569217 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 260, Length: 19, Priority: Normal"
"11:54:32.4570258 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 279, Length: 172, Priority: Normal"
"11:54:32.4570875 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 451, Length: 69, Priority: Normal"
"11:54:32.4571435 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 520, Length: 66, Priority: Normal"
"11:54:32.4571772 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 586, Length: 41, Priority: Normal"
"11:54:32.4572887 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 627, Length: 30"
"11:54:32.4573025 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 657, Length: 30"
"11:54:32.4573158 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 687, Length: 329"
"11:54:32.4573281 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 1,016, Length: 217"
"11:54:32.4573464 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 1,233, Length: 200"
"11:54:32.4574100 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 1,433, Length: 7,310, Priority: Normal"
"11:54:32.4574794 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 8,743, Length: 1,513"
"11:54:32.4575705 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,256, Length: 207"
"11:54:32.4575999 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,463, Length: 60"
"11:54:32.4576129 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,523, Length: 5"
"11:54:32.4576247 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,528, Length: 5"
"11:54:32.4576399 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,533, Length: 20"
"11:54:32.4576567 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,553, Length: 20"
"11:54:32.4576715 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,573, Length: 20"
"11:54:32.4576872 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,593, Length: 20"
"11:54:32.4577028 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,613, Length: 20"
"11:54:32.4577197 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,633, Length: 20"
"11:54:32.4577367 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,653, Length: 20"
"11:54:32.4577525 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,673, Length: 20"
"11:54:32.4577689 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,693, Length: 20"
"11:54:32.4577855 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,713, Length: 20"
"11:54:32.4578015 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,733, Length: 20"
"11:54:32.4578173 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,753, Length: 20"
"11:54:32.4578334 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,773, Length: 20"
"11:54:32.4578497 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,793, Length: 20"
"11:54:32.4578650 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,813, Length: 20"
"11:54:32.4578800 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,833, Length: 20"
"11:54:32.4579347 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,853, Length: 125"
"11:54:32.4579482 AM","CustExt.exe","14460","WriteFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS","Offset: 10,978, Length: 22"
"11:54:32.4579618 AM","CustExt.exe","14460","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\prints784001.pdf","SUCCESS",""
"11:55:25.0924298 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\desktop.ini","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Sequential Access, Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:55:26.3109698 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting\desktop.ini","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Sequential Access, Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:55:26.3165459 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:55:26.3165645 AM","explorer.exe","15744","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:54:32 AM, LastWriteTime: 3/7/2017 11:54:32 AM, ChangeTime: 3/7/2017 11:54:32 AM, FileAttributes: D"
"11:55:26.3165736 AM","explorer.exe","15744","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:55:26.5485679 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Synchronize, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:55:26.5486013 AM","explorer.exe","15744","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:54:32 AM, LastWriteTime: 3/7/2017 11:54:32 AM, ChangeTime: 3/7/2017 11:54:32 AM, FileAttributes: D"
"11:55:26.5486221 AM","explorer.exe","15744","NotifyChangeDirectory","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","CANCELLED","Filter: FILE_NOTIFY_CHANGE_DIR_NAME"
"11:55:26.5488907 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Synchronize, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:55:26.5489210 AM","explorer.exe","15744","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:54:32 AM, LastWriteTime: 3/7/2017 11:54:32 AM, ChangeTime: 3/7/2017 11:54:32 AM, FileAttributes: D"
"11:55:26.5489396 AM","explorer.exe","15744","NotifyChangeDirectory","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","CANCELLED","Filter: FILE_NOTIFY_CHANGE_FILE_NAME, FILE_NOTIFY_CHANGE_ATTRIBUTES, FILE_NOTIFY_CHANGE_LAST_WRITE"
"11:55:26.5539178 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:55:26.5539509 AM","explorer.exe","15744","QueryRemoteProtocolInformation","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","INVALID PARAMETER",""
"11:55:26.5539652 AM","explorer.exe","15744","QueryDirectory","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","0: ., 1: .., 2: prints662001.pdf, 3: prints784001.pdf"
"11:55:26.5540695 AM","explorer.exe","15744","QueryDirectory","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","NO MORE FILES",""
"11:55:26.5540903 AM","explorer.exe","15744","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:55:26.5650357 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Attributes, Read Control, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:55:26.5650728 AM","explorer.exe","15744","QueryRemoteProtocolInformation","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","INVALID PARAMETER",""
"11:55:26.5650946 AM","explorer.exe","15744","QuerySecurityFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Information: Owner, DACL"
"11:55:26.5651244 AM","explorer.exe","15744","QueryNameInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Name: \Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting"
"11:55:26.5653633 AM","explorer.exe","15744","QueryRemoteProtocolInformation","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","INVALID PARAMETER",""
"11:55:26.5653833 AM","explorer.exe","15744","QuerySecurityFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Information: Owner, Group, DACL"
"11:55:26.5654005 AM","explorer.exe","15744","QueryBasicInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","CreationTime: 3/7/2017 11:53:07 AM, LastAccessTime: 3/7/2017 11:54:32 AM, LastWriteTime: 3/7/2017 11:54:32 AM, ChangeTime: 3/7/2017 11:54:32 AM, FileAttributes: D"
"11:55:26.5654370 AM","explorer.exe","15744","CloseFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS",""
"11:55:26.5662899 AM","explorer.exe","15744","CreateFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Desired Access: Read Attributes, Read Control, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:55:26.5663255 AM","explorer.exe","15744","QueryRemoteProtocolInformation","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","INVALID PARAMETER",""
"11:55:26.5663486 AM","explorer.exe","15744","QuerySecurityFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Information: Owner, DACL"
"11:55:26.5663794 AM","explorer.exe","15744","QueryNameInformationFile","C:\Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting","SUCCESS","Name: \Users\Administrator\AppData\Roaming\Session#4\MyPDFprinting"
"
Re: Universal Printer (1 in 100) fails to transfer to client
Universal is set "direct to printer". Can that cause printer not ready situations when Universal is in USE by another session?