What is PrintNightmare?
Last month, Microsoft acknowledged that all versions of Windows may be affected by the “PrintNightmare” vulnerability. However, there’s an easy way to protect your system against this vulnerability. Microsoft released an update on August 10th to fix it. However, soon after, it was discovered that attackers could still exploit the Print Spooler service to execute codes for installing apps, manipulating your data, or creating accounts with SYSTEM privileges. Microsoft confirmed this claim and said, “A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations.” It makes sense to disable Print Spooler until Microsoft releases a proper fix. In this guide, we’ll walk you through the steps and show you how to disable Print Spooler so you can protect your system against the new PrintNightmare CVE-2021-36598 vulnerability. The latest fix was released on September 14th, so make sure to install the latest Windows updates to get this patch installed. Note: You will not be able to print or fax anything from your Windows PC if you disable this service.
Disable Print Spooler Using Group Policy Editor
If you have Windows 10 Pro or Windows 10 Enterprise, you have the option to change the Print Spooler service policy from the Group Policy Editor. If you’re on Windows 10 Home, skip to the next method. Once you’ve disabled the Print Spooler service policy, the vulnerability can’t be exploited.
Disable Print Spooler From the Services App
Before you disable the Print Spooler service, note that you can’t print or fax using your PC with the Print Spooler service disabled. If you need to print or fax something, you will need to re-enable the service.
Disable Print Spooler from System Configuration
You can disable the Print Spooler service using System Configuration. However, this method accomplishes the same thing as the previous method, but in a different way. You will not be able to print or fax on your Windows PC after you’ve disabled the service using this method.
Disable Print Spooler Using PowerShell
The PowerShell method disables the service the same way as the previous two methods. You won’t be able to print or fax after disabling the service with this method. Stop-Service -Name Spooler -Force Set-Service -Name Spooler -StartupType Disabled The first command stops the Print Spooler service if it’s already running on your system. The next command disables the service so it doesn’t start automatically in the future.
Your System is Now Secure
Once you’ve disabled Print Spooler, you don’t need to worry about PrintNightmare. However, make sure that automatic updates are turned on so you can get the fix once Microsoft releases it (the final fix was hopefully released 3 days ago). At that point, you can enable Print Spooler again so that you can print normally from your machine.
