Disabling spooler on just your DC's is not enough #PrintNightmare
Quick testing from me and @filip_dragovic
* NoWarningNoElevationOnInstall can be set to 0
* Authenticated users do not need to be in Pre-Windows 2000 Compatible Access group
Impacket 🤝[MS-PAR]
As domain users, we can use OpenRemoteBaseKey to enumerate print drivers on any member/dc server.
Manually specifying pDriverPath is no longer required
• • •
Missing some Tweet in this thread? You can try to
force a refresh