Adam10541 wrote:
There must be specific circumstances where this works, as I said in my previous post print then save makes no difference to the meta data when I did it (Win 7 x64, Word 2007).
All my previous testing was on XP 32 bit with different versions of Office. The behavior matched what's reflected in my charts. I ran a few tests from a Win 7 64-bit Office 2007 (32-bit version) and the print metadata did change slightly. Below are my tests and the resulting print date:
Created a new document, type one word, and saved it
No print date
Printed document and closed it without saving
No print date
Printed document and saved it
No print date
Printed document, modified document, and saved it
Print date was updated
Modified document, printed it, and saved it
Print date was updated
The slight change in behavior is the document has to be modified in addition to it being printed and saved for the print date to be updated. Not sure when I'll be able to circle back around to repeat all my testing on Win 7 64-bit, Office 32-bit, and Office 64-bit. I've since moved on to the IR side of the house and don't deal with fraudulent documents like I used to.
Corey Harrell
"Journey Into Incident Reponse"
http://journeyintoir.blogspot.com/
↧