We have a user printing large documents, and wasting a lot of paper and ink. I have looked in the audit log, and the user is identified as a remote user instead of their username. As far as I can tell the user has added the printer as a local IP printer instead of printing through our printer server. Our print server does not show any activity at the time of the printing. I think that is why it is not resolving a username. Is there a way to track the IP address that is printing so I can identify the device and user? Here is what the audit log shows.