Forum Discussion
kevind5
Apr 19, 2023Copper Contributor
Device Timeline - Defender 365 - 'Print' events
Hello I really see much value with the P2 feature of Timeline. I have visibility into pretty much all functions on the desktop. The one event I'm not seeing are Print events. Basically, I'm lo...
- Aug 17, 2023
Hi 214820
Thank you for your post!
Yes, it sounds like you have the correct understanding since (as mentioned in the link that you provided) the location of the tenant company determines the market where the partner can sell CSP program offers; and the partner's market can be in various regions and/or countries. Please note the unsupported countries/regions and other limitations listed on the link. CSP global markets - Partner Center | Microsoft Learn.
If this reply answers your question, please Accept as the solution to help the other members find it more quickly. Otherwise, please let me know if you need further assistance on this topic.
Regards,Microsoft CSP Licensing Concierge
SABBIR_RUBAYAT
Apr 19, 2023Iron Contributor
Though this thing can be managed by intune but You can use the PnP event to find the USB printer used in the organization:
//find the USB Printer VID/PID
DeviceEvents
| where ActionType == "PnpDeviceConnected"
| extend parsed=parse_json(AdditionalFields)
| extend DeviceDescription = tostring(parsed.DeviceDescription)
| extend PrinterDeviceId = tostring(parsed.DeviceId)
| extend VID_PID_Array = split(split(PrinterDeviceId, "\\")[1], "&")
| extend VID_PID = replace_string(strcat(VID_PID_Array[0], '/', VID_PID_Array[1]), 'VID_', '')
| extend VID_PID = replace_string(VID_PID, 'PID_', '')
| extend ClassId = tostring(parsed.ClassId)
| extend VendorIds = tostring(parsed.VendorIds)
| where DeviceDescription == 'USB Printing Support'
| project Timestamp , DeviceId, DeviceName, ActionType, DeviceDescription, VID_PID, ClassId, PrinterDeviceId, VendorIds, parsed
| order by Timestamp desc
Please mark helpful if you find my comment helpful
//find the USB Printer VID/PID
DeviceEvents
| where ActionType == "PnpDeviceConnected"
| extend parsed=parse_json(AdditionalFields)
| extend DeviceDescription = tostring(parsed.DeviceDescription)
| extend PrinterDeviceId = tostring(parsed.DeviceId)
| extend VID_PID_Array = split(split(PrinterDeviceId, "\\")[1], "&")
| extend VID_PID = replace_string(strcat(VID_PID_Array[0], '/', VID_PID_Array[1]), 'VID_', '')
| extend VID_PID = replace_string(VID_PID, 'PID_', '')
| extend ClassId = tostring(parsed.ClassId)
| extend VendorIds = tostring(parsed.VendorIds)
| where DeviceDescription == 'USB Printing Support'
| project Timestamp , DeviceId, DeviceName, ActionType, DeviceDescription, VID_PID, ClassId, PrinterDeviceId, VendorIds, parsed
| order by Timestamp desc
Please mark helpful if you find my comment helpful
faruk2bd1971
Apr 23, 2023Brass Contributor
Accurate answer. Thank you sabbir . this one should marked as best answer