Every print job we run is being tracked by our integrity monitor. The change event record for the program C:\Windows\system32\spool\PRINTERS\ is off the charts with change events. I think every time we print a shipping label it logs a change. This seems like a bit much. Is there a way i can stop tracking our print jobs?
Thanks for the help!
You can either exclude the folder from monitoring in the FIM policy or create and Advanced Exclusion filter rule (this is also in FIM policy) to provide a more constrained exclusion criteria.