You can also configure Group Policy to block inbound remote printing by disabling the ‘Allow Print Spooler to accept client connections’ option in Computer Configuration > Administrative Templates > Printers. Disable inbound remote printing via Group Policy Set-Service -Name Spooler -StartupType Disabled 3. You can disable the Print Spooler service using the following PowerShell command:

For example, domain controller servers don’t need access to a printer, and so you should make sure that the Print Spooler service is disabled on all domain controllers. This is particularly relevant for devices, applications, and services, that do not require the ability to print. Disable the Print Spooler serviceĭisabling the Print Spooler service disables local and remote printing features. If for whatever reason, you need to install the updates manually, you will need to go to Settings > Update & Security > Windows Update, and then restart your machine for the changes to take effect. The most obvious first step towards mitigating the PrintNightmare vulnerability is to install the relevant patches/updates.

Otherwise, there are a number of additional steps you should take. If your computer is not directly connected to a printer, and you receive automatic updates, then simply disabling the Print Queue service will likely be enough to protect your device from the PrintNightmare vulnerability. Tips to Protect Yourself Against the PrintNightmare Vulnerability Risk Analysis Identify areas of risk and govern access to sensitive data.Īnalyze changes, and review current and historic permissions.Instant visibility on permission changes, spot users with excessive permissions and reverse unwanted changes. Threat Response Automated actions based on alerts.Threat Detection Anomaly spotting and real time alerts.Intelligent threat detection through real time alerts, anomaly spotting and automated threat response. Learn more On-Premise & Cloud Platforms We Audit Monitor, audit and report on changes and interactions with platforms, files and folders across your on-premises and cloud environment.

Lansweeper printnightmare