We’ve just had a strange problem where print jobs for one of our users were printing out and showing up on the printer as coming from a different username.
Normally, probably wouldn’t matter too much, but they use PaperCut account selection – meaning the popups to select the printer account were displaying on the other users’ screen.
After checking the event logs we noticed Explorer and Spoolsv were connecting to the print server as a different user’s account.
I remembered recently coming across the Windows Credential Manager – so opened up Credential Manager and sure enough, there was a saved network credential for this network server.
Deleting the credentials then restarting the computer has thankfully resolved the issue. First time I’ve run into this problem!