How to remove the Print Spooler vulnerability

The Windows Printer Spooler is a service that manages and monitors file printing. It is enabled by default. A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This is also known as Print Nightmare

There is no solution patch currently available, except disabling the Printer Spooler Service.

This video shows you how to disable the Print Spooler service as well as enable auditing so you can detect a real-time Print Nightmare event.