Use this report as a high-signal triage view to spot devices where printer drivers are using non-default print processors, which can expand attack surface, destabilize the spooler, or break auditing/compatibility. With per-device and per-driver context (name, version, provider, processor, path), grouped by domain and asset, decide whether to revert to WinPrint, update/replace the driver, or investigate unsigned/legacy add-ons, document justified exceptions and remove anything you can’t defend. You can find more info on this use case in Pro Tips 74.
Run the Printer Drivers Using Non-Default Print Processors Report Now!
SELECT TOP 1000000 a.AssetID, a.AssetName, a.Domain, a.IPAddress, os.OSname AS [OS], a.Version, Coalesce(os.Image, [at].AssetTypeIcon10) AS [icon], pdu.Name, pd.DriverVersion, pd.PrintProcessor, pd.DriverPath, pdu.Provider, ac.Manufacturer, ac.Model, pd.LastChanged, a.Lastseen AS [Last successful scan], a.Lasttried AS [Last scan attempt] FROM tblAssets a LEFT JOIN tblAssetCustom ac ON ac.AssetID = a.AssetID JOIN tblPrinterDrivers pd ON a.AssetID = pd.AssetID JOIN tblPrinterDriversUni pdu ON pd.PrinterDriverUniID = pdu.PrinterDriverUniID LEFT JOIN tsysAssetTypes [at] ON [at].AssetType = a.Assettype LEFT JOIN tsysIPLocations ipl ON a.IPAddress = ipl.IPLocation LEFT JOIN tsysOS os ON os.OScode = a.OScode LEFT JOIN tblState st ON st.State = ac.State LEFT JOIN ( SELECT MAX(LastChanged) as lastIndirectScan, tblIndirectScan.AssetId FROM tblIndirectScan GROUP BY tblIndirectScan.AssetId ) indirect ON a.AssetId = indirect.AssetId WHERE LOWER(st.Statename) = 'active' and pd.PrintProcessor IS NOT NULL and pd.PrintProcessor <> 'winprint' and pd.LastChanged > GetDate() - 7 ORDER BY a.Domain, a.AssetName, pdu.Name
Explore the full platform, free for 14 days.
No credit card required.