Windows Print Spooler-Dienst RCE CVE-2021-1675 (PrintNightmare)

Wie deaktiviere ich den Print Spooler-Dienst?

CMD Shell

net start | findstr -i "spooler"

net stop spooler

REG ADD "HKLM\SYSTEM\CurrentControlSet\Services\Spooler" /v "Start " /t REG_DWORD /d "4" /f

PowerShell

Get-Service -Name Spooler

Stop-Service -Name Spooler -Force

Set-Service -Name Spooler -StartupType Disabled

Dienststeuerung

sc query Spooler

sc config Spooler start=disabled

Referenzen

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527

#CVE-2021-1675 #PrintNightmare #WindowsPrintSpoolerServiceRCE