HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows
By auditing the above key, you can determine the name of the process which is reverting the default printer setting at every restart. In the above branch, the value named "Device" stores the name and location of the printer which you set as the default.
More details on registry auditing:
How to use Group Policy to configure auditing of Windows registry keys in XP Professional?:
http://www.winxptutor.com/auditreg.htm
--
Regards,
Ramesh Srinivasan, Microsoft MVP [Windows XP Shell/User]
Windows® XP Troubleshooting http://www.winhelponline.com
<ad...@ejourney.com> wrote in message news:1170993059....@h3g2000cwc.googlegroups.com...
> How to use Group Policy to configure auditing of Windows registry keys in XP Professional?:http://www.winxptutor.com/auditreg.htm
>
> --
> Regards,
>
> Ramesh Srinivasan, Microsoft MVP [Windows XP Shell/User]
> Windows® XP Troubleshootinghttp://www.winhelponline.com
>
> <a...@ejourney.com> wrote in messagenews:1170993059....@h3g2000cwc.googlegroups.com...
You could try using RegMon to monitor registry accesses in realtime. This is ideal if the default printer changes during the current logon session, but not during logon/logoff.
RegMon for Windows v7.04
http://www.microsoft.com/technet/sysinternals/utilities/regmon.mspx
--
Regards,
Ramesh Srinivasan, Microsoft MVP [Windows XP Shell/User]
Windows® XP Troubleshooting http://www.winhelponline.com
<ad...@ejourney.com> wrote in message news:1171025625.9...@k78g2000cwa.googlegroups.com...
My question is this: once the user has determined which app is changing the
default printer, what's the solution? Is there any way to "lock" the default
printer so that apps can't change it without, say, administrator approval?
RB
>> what's the solution?
Uninstall/re-configure that application. Or, run a .REG file at every startup to set the default printer as per your choice.
--
Regards,
Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com
"Nyco_ork" <Nyc...@discussions.microsoft.com> wrote in message news:FF1CCF2B-46B1-4726...@microsoft.com...