Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

PrintNightmare, Critical Windows Print Spooler Vulnerability (Windows Admins: Disable Print Spooler NOW)
US Cybersecurity & Infrastructure Security Agency ^ | June 30, 2021 | US-CERT-CISA Agency

Posted on 07/01/2021 7:55:16 AM PDT by dayglored

click here to read article


Navigation: use the links below to view more comments.
first previous 1-2021-37 last
To: dayglored

Just Wonderful!


21 posted on 07/01/2021 9:14:45 AM PDT by Revel
[ Post Reply | Private Reply | To 1 | View Replies]

To: AnglePark

Norton 360 Premium Utilities, MalwareBytes Premium and CCleaner Pro keep my 2 HP industrial machines running as well as they did when I got them in 2009.


22 posted on 07/01/2021 9:36:45 AM PDT by Carriage Hill (A society grows great when old men plant trees, in whose shade they know they will never sit..)
[ Post Reply | Private Reply | To 20 | View Replies]

To: dayglored

23 posted on 07/01/2021 9:54:47 AM PDT by Dalberg-Acton
[ Post Reply | Private Reply | To 1 | View Replies]

To: carriage_hill

I’ve got Norton 360, but I haven’t bought the utilities. I’ll upgrade my sub this year when it renews, especially since our machines are getting older.


24 posted on 07/01/2021 10:14:22 AM PDT by AnglePark
[ Post Reply | Private Reply | To 22 | View Replies]

To: dayglored

Not really, since most businesses are not using their domain controller as a print server, so disabling the spooler service on the DC doesn’t affect printing at all for the rest of the domain.


25 posted on 07/01/2021 10:16:46 AM PDT by Boogieman
[ Post Reply | Private Reply | To 4 | View Replies]

To: MortMan

Yes, and it’s enabled by default. You can run “services.msc” from the “Run” section of the Start Menu to see what services are running, then change the “Start Up Type” to “Disabled” to turn it off.


26 posted on 07/01/2021 10:19:01 AM PDT by Boogieman
[ Post Reply | Private Reply | To 11 | View Replies]

To: deoetdoctrinae

You deserve an “attaboy” for that one!


27 posted on 07/01/2021 10:24:05 AM PDT by Sgt_Schultze (When your business model depends on slave labor, you're always going to need more slaves)
[ Post Reply | Private Reply | To 12 | View Replies]

To: dayglored

It took me less than 60 seconds to add a service stop/disable GP preference that touches every system in my customer environment (>2K Windows systems). MS will fix the exploit.

Printing has ALWAYS been a black hole. I can’t tell you how many contracts I’ve turned down to do enterprise printing implementations. It’s the wild wild west, and even Microsoft’s print server solution is inadequate.


28 posted on 07/01/2021 10:39:38 AM PDT by rarestia (Repeal the 17th Amendment and ratify Article the First to give the power back to the people!)
[ Post Reply | Private Reply | To 4 | View Replies]

To: Sgt_Schultze

29 posted on 07/01/2021 10:44:03 AM PDT by deoetdoctrinae (Gun-free zones are playgrounds for criminals.)
[ Post Reply | Private Reply | To 27 | View Replies]

To: rarestia
> Printing has ALWAYS been a black hole.

Yep. Of all the aspects of computing, printing problems have uniformly been the most horrific to work on. Even old tape drives aren't as bad as printing.

30 posted on 07/01/2021 11:34:42 AM PDT by dayglored ("Listen. Strange women lying in ponds distributing swords is no basis for a system of government.")
[ Post Reply | Private Reply | To 28 | View Replies]

To: AnglePark

I am going to make you and others here aware of some information that I received from my computer shop. All that I know about this place is that it exists, I have NOT dealt with or even spoke to them, and I have not vetted them in any way. I had some work done at Altex, the shop where I bought my computer, and asked them if they sold used computers, and they referred me to a place called Discount Electronics, URL at the end of this post. With that being said, I think that they are some sort of defacto Dell Outlet facility, but I don’t know anything about that. They are located right down the road from the Dell Campus in Round Rock. They sell Dell computers, with Windows 10 OR Windows 7 Pro preinstalled. Prices seem great.

The URL is https://discountelectronics.com/used-computers/


31 posted on 07/01/2021 12:10:57 PM PDT by matthew fuller (Biden's illegal presidency is a demonazi declaration of war on Americans and civilization.)
[ Post Reply | Private Reply | To 20 | View Replies]

To: AnglePark

It’s truly worth it, for older machines.


32 posted on 07/01/2021 12:30:24 PM PDT by Carriage Hill (A society grows great when old men plant trees, in whose shade they know they will never sit..)
[ Post Reply | Private Reply | To 24 | View Replies]

To: dinodino
For the life of me, I don’t understand why anyone who has a choice would run Windows. It’s been a nightmare since inception.

I'm right there with you.

33 posted on 07/01/2021 1:39:57 PM PDT by zeugma (Stop deluding yourself that America is still a free country.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: dayglored

As someone who still backs up some data to 500 GB tape, I agree with you 100%. We have a single B&W laser printer for the house, and I refuse to manage it with my in-house domain lab.


34 posted on 07/01/2021 2:07:09 PM PDT by rarestia (Repeal the 17th Amendment and ratify Article the First to give the power back to the people!)
[ Post Reply | Private Reply | To 30 | View Replies]

To: dayglored

We had a printer recently that would not stop printing a huge document, lol, and was in a constant state of spooling. It was a nightmare!


35 posted on 07/01/2021 3:21:41 PM PDT by browniexyz
[ Post Reply | Private Reply | To 10 | View Replies]

To: dayglored
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a notification regarding the critical PrintNightmare zero-day vulnerability and advises admins to disable the Windows Print Spooler service on servers not used for printing. "CISA encourages administrators to disable the Windows Print spooler service in Domain Controllers and systems that do not print," the US federal agency said. https://www.bleepingcomputer.com/news/security/cisa-disable-windows-print-spooler-on-servers-not-used-for-printing/

a workaround fix can be applied by disabling the printer spooler service. Here's how to do it on both GPO and PowerShell. https://github.com/LaresLLC/CVE-2021-1675

36 posted on 07/02/2021 4:48:37 AM PDT by daniel1212 ( Turn to the Lord Jesus as a damned+destitute sinner, trust Him to save + be baptized + follow Him!)
[ Post Reply | Private Reply | To 2 | View Replies]

To: NicoDon

Or the cost to rip and replace 10, 12, 15 years of hardware “that still works”...


37 posted on 07/02/2021 6:18:57 AM PDT by ro_dreaming ("XX = female; XY = male. Who's the science deniers now?" - Me)
[ Post Reply | Private Reply | To 8 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-37 last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson