How to mitigate Print Spooler PrintNightmare vulnerability on Windows 10

[RV_]

Note: The article has screen shots that are not coming out here so two warnings. If you can't follow what steps are being given to disable print spooler to mitigate the issue until Microsoft patches it, do not try this. If you insist you do so at your own risk. The directions show how to disable it and re-enable it later when patched with good screen shots so do click on the link at the end and use the screen shots to get it done safely.

Excerpt:

An unpatched vulnerability could open the doors for attackers from accessing your device — here's how you can protect yourself until a permanent fix is released.

Microsoft has acknowledged a new vulnerability known as "PrintNightmare" that affects all versions of Windows. The vulnerability affects the Print Spooler service and allows hackers to execute lines of code to install apps, manipulate your data, or even create a new account with full privileges.

According to reports, the vulnerability was accidentally published by Sangfor researchers, and it was soon deleted. However, the code was quickly forked on GitHub, allowing others to get access to it before it was removed.

The company is actively investigating the problem and is recommending temporarily disabling Windows Print Spooler service or blocking incoming connections to the print server whenever possible until a permanent fix is released.

In this Windows 10 guide, we will walk you through the steps to mitigate the newly discover PrintNightmare vulnerability.

• How to disable Print Spooler service on Windows 10
• How to disable Print Spooler service via Group Policy on Windows 10  

How to disable Print Spooler service on Windows 10

To disable Print Spooler service to mitigate the PrintNightmare vulnerability on Windows 10, use these steps:

1. Open Start.
2. Search for PowerShell, right-click the top result and select the Run as administrator problem.

3. Type the following command to stop the Print Spooler service and press Enter:

   Stop-Service -Name Spooler -Force

   /sites/wpcentral.com/files/styles/large/public/field/image/2021/07/disable-printspooler-printnightmare-cmd.jpgSource: Windows Central

4. Type the following command to prevent the service from starting back up again during restart and press Enter:

   Set-Service -Name Spooler -StartupType Disabled

Once you complete the steps, the device should be protected against the PrintNightmare attack, but you will no longer be able to print locally or remotely."

Here's the article with screen shots and related links:

https://www.windowscentral.com/how-mitigate-print-spooler-printnightmare-vulnerability-windows-10#:~:text=How to disable Print Spooler service on Windows,up again during restart and press Enter%3A