Ensure print spooler is set to disabledID: oval:org.secpod.oval:def:95627 | Date: (C)2023-12-08 (M)2024-01-12 |
Class: COMPLIANCE | Family: windows |
Loads files to memory for later printing
Recommended value for Member Server: Disabled
Recommended value for Domain Controller: Disabled
Potential Impact: Domain Controllers will not be able to prune published printers from Active Directory. By default, Domain Controllers prune printer objects from Active Directory if the computer that published them doesn't respond to contact requests.
Domain Controllers will not be able to act as a print server, sharing printers for clients.
Applications on and users logged in at Domain Controllers will not be able to print, including printing to files (such as Adobe Portable Document Format (PDF)) which uses the Print Spooler service
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services!Print Spooler
(2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Spooler!Start
Platform: |
Microsoft Windows 10 |