Network printer? Is there log keeping on the printer. Might be able to back trace IP or Mac address.

Was it ascii picture or an actual picture.

Someone could use <net print> to avoid some obvious detections.

Meaning, they have a valid login to your network, but use net print to indicate a seperate set of credentials.

Better to try to trace directly to IP or mac address if possible.