I have a Windows 2008 R2 Fax Server, and there are several standard domain users who send faxes but the majority of the faxes are sent automatically via a web application that resides on the fax server and runs with administrative rights.
But I need to have all the fax user accounts managed, making sure faxes are sent. And I would prefer using Windows Fax and Scan application from a user who is not an administrator. A standard user, but they would be able to "Resend" or "Cancel" bad faxes.
On the fax server (WORKGROUP non domain), I created a security group "Fax Power Users"… added a standard user who I want to be able to manage and see all the faxes, and gave them full control. Above the normal "Fax Users" security group.
Problem, is that this Fax Power User can connect via Windows Scan and Fax in windows 7… but they only see their faxes and not anyone else's faxes.
Am I missing a step? Is it possible?
Do I have to look at a 3rd party solution?
The simple way would be for this Power Fax User connect to the fax server with the administrator account that the faxes are being created by on the web application/fax server….. but this would be bad for security.
NOTE: Been tinkering with a syslog agent to monitor the fax server output.log and sending an email alert but seems to be the long way around. Window Events are vague, and would not be able to send any pertinent information to allow a standard user make adjustments in the fax queue.
Best Answer
To view all user fax activity on a server you can do the following: First enable activity logging for a fax server,
Open Fax Service Manager.
Optional, you may also want to set the archiving limits and set your rules for the length of the logging.
Second, use the following script: I then modified a powershell script I found: The script imports the Tab Delimited fax text file and creates a csv file. And sorts the contents by the "Submission Date" and the "Status"/"Transmission Error". It will then export the csv file as a html file which is then copied to a IIS web server for users to view. I run a scheduled task once an hour.
Note: The TabDelimited file contained 50 columns, but Powershell had a problem exporting all 50 columns to html. 50 is the max limit, but I had to select just 49 columns for it to work correctly.
The following script is rough and could be improved but works fine for my purposes. Original powershell script can be found here.