PrintNightmare still a nightmare for patchers

Topic

New Reply

PATCH WATCH By Susan Bradley As we start to ready ourselves for the September updates, we’re still haunted by the PrintNightmare issues from the Augus
[See the full post at: PrintNightmare still a nightmare for patchers]

Susan Bradley Patch Lady/Prudent patcher

5 users thanked author for this post.

rc primak, Patricia Grace, lmacri, cobber2076, AlexEiffel

Reply | Quote

Replies

Susan – I’ve been using Group Policy Editor’s “Select the target Feature Update version” to stave off feature updates.  I am trying to follow your instructions for using this to postpone updating to Windows 11.  However, I see no place other than the “Comment” box to type “Windows 10.”  Is that what you meant, or am I missing something?  Thanks…

Reply | Quote

You have to either install the Preview CU KB5005101 or wait until Patch Tuesday (tomorrow) for the option to be added to Group Policy. It is not in the Patch Tuesday update for August.

2 users thanked author for this post.

rc primak, cobber2076

Reply | Quote

Susan,  Just a quick question re PrintNightMare.

Is PrintNightMare capable of starting the Print Spooler when it is set to Manual Start in the Services Properties?

If it is not it would much simpler to print on a local printer than having to disable the spooler each time.

Thank you,

Mike Davies

Moderator Note: E-mail address removed. For security reasons, please do not include personal information in your posts.

Reply | Quote

I have not seen an exploit go out of it’s way to start the print spooler service.  Even a local printer needs the spooler service running.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

In an earlier post you indicated print nightmare not much of a risk for home users..is that still your view?

I’ve deactivated spooler on all but one PC and would like to leave it on for convenience unless it’s a significant risk..home network..no business or company connections.

Thanks

Reply | Quote

Quote from Susan in 9/13/2021 newsletter:

“To make it easier for you, I’ve built a registry key to download that will set this value format. This registry settings file will force your computer to remain on Windows 10 21H1.

“Alternatively, and if you are comfortable with Windows 10 on your system today, allow the system to update to 21H2 when it finally comes out, and then use the following registry setting to keep it on 21H2.

“Just as before, you can use my registry key method. 

“For those of you who do want to run Windows 11, remember that in order to use Microsoft’s official PC Health Check App, you must reset these group policy/registry settings. If you do not, the tool reports that your system is managed by an IT administrator and won’t display any information.

I’m sorry but the above is not easy for me to follow.

First, I have Windows Home 21H1. I want to use the registry key Susan built to stop updates at 21H2.

Can I download the registry setting from Susan that will keep it at 21H2 now while I am still on 21H1?

Or do I have to wait for the 21H2 update before I can download the registry key to hold it at 21H2.

Second, I don’t understand the last paragraph about changing the registry settings when it is time to get Windows 11. I don’t want it now, but when the time comes how will I “reset the registry settings”?

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.3324
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2308(Build 16731.20170 C2R)

Reply | Quote