I've been asked to find out who (or which logon at least) printed a pornagraphic picture on a W98 workstation shared printer from our NT4 network. A secretary came in this morning and found a quite nasty pic in her printers out tray. She has it setup as "share level" so anyone with a valid logon to the network can print to her printer. I have been trying to query the MS technet database without success looking for some form of printjob log file that could track this.

Anybody know what I should be looking for/at?

Shared printer under 98 uses peer to peer. If you can see the printer, you can print anonymously under this setup. Nothing I've found shows any logging at all.