<html><head></head><body><div class="ydp5ddd17f7yahoo-style-wrap" style="font-family: Helvetica Neue, Helvetica, Arial, sans-serif; font-size: 13px;"><div></div>
<div dir="ltr" data-setdir="false">So much to discuss about how to deal with this security issue! And more to come with the July regular monthly Microsoft Windows 10 updates. </div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">I suggest those with a desire to follow this and other Windows updating issues, to subscribe to the former Windows Secrets (paid) newsletter and web site. It's still called AskWoody.com, though Woody Leonard recently handed over the reins to Susan Bradley, a Microsoft MVP IT professional with years of Office and Windows patching experience. I am a paid subscriber and sometimes this newsletter pays for itself. This is one of those times.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Bottom Line is, for home and Pro small business users, the best advice right now is, DO NOTHING. Wait for the July Windows and Office updates. Some of the advice and "mini-patches" out there could wreck your ability to do more than printing in Windows.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">I have much more than average knowledge of how Windows works, and I don't see presently a complete solution to this security issue -- YET. I also don't see much of a security threat if your only networked printers and scanners are on your home network and do not have remote printing or Cloud printing features in use.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false"> For myself, I did change the Advanced Security Restrictions on one Print Driver folder within System32 >> Print Spool, and all of its child-folders. Way beyond the skill set of the average home or small business user! This is a fully reversible change and is not negated by any Microsoft emergency patches. (Or, it can be checked and reinstated after any patching.) I left all Group Policy items (in Pro) alone! </div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Permissions Change:</div><div dir="ltr" data-setdir="false"><a href="https://blog.truesec.com/2021/06/30/fix-for-printnightmare-cve-2021-1675-exploit-to-keep-your-print-servers-running-while-a-patch-is-not-available/" rel="nofollow" target="_blank" class="">https://blog.truesec.com/2021/06/30/fix-for-printnightmare-cve-2021-1675-exploit-to-keep-your-print-servers-running-while-a-patch-is-not-available/</a><br></div><div><br></div><div dir="ltr" data-setdir="false">Disable Print Spooler Service:</div><div dir="ltr" data-setdir="false"><a href="https://www.bleepingcomputer.com/news/microsoft/how-to-mitigate-print-spooler-vulnerability-on-windows-10/" rel="nofollow" target="_blank">https://www.bleepingcomputer.com/news/microsoft/how-to-mitigate-print-spooler-vulnerability-on-windows-10/</a><br></div><div><br></div><div dir="ltr" data-setdir="false">Out of Band Patch fails to fix the underlying vulnerability:</div><div dir="ltr" data-setdir="false"><a href="https://www.bleepingcomputer.com/news/microsoft/microsofts-incomplete-printnightmare-patch-fails-to-fix-vulnerability/" rel="nofollow" target="_blank">https://www.bleepingcomputer.com/news/microsoft/microsofts-incomplete-printnightmare-patch-fails-to-fix-vulnerability/</a><br></div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">News and Information -- Susan Bradley, AskWoody (Windows Secrets) Contributor and Microsoft MVP:</div><div dir="ltr" data-setdir="false"><a href="https://www.askwoody.com/2021/print-nightmare-is-going-to-be-a-nightmare/" rel="nofollow" target="_blank">https://www.askwoody.com/2021/print-nightmare-is-going-to-be-a-nightmare/</a><br></div><div dir="ltr" data-setdir="false"> </div><div dir="ltr" data-setdir="false">and:</div><div dir="ltr" data-setdir="false"><a href="https://www.askwoody.com/2021/out-of-band-for-print-nightmare-is-out/" rel="nofollow" target="_blank">https://www.askwoody.com/2021/out-of-band-for-print-nightmare-is-out/</a><br></div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">If you have anything which prints and is facing the Internet or the outside world in any way, maybe disable the Print Spooler Service when not actually printing. And print locally only. Wireless is fine, as long as it's only using a local network. Businesses may have other considerations, but I assume they have IT pros on-call who have already made changes or offered advice until a patch covering the full extent of this issue is released by Microsoft through normal patching channels.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">-- Bob Primak </div><div><br></div>
</div><div id="yahoo_quoted_6544793766" class="yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Thursday, July 8, 2021, 02:39:28 AM EDT, Evie T <et8686@gmail.com> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id="yiv6345479103"><div>Microsoft issues urgent security warning on PrintNightmare: Update your PC immediately - CNN<br><br><a rel="nofollow noopener noreferrer" target="_blank" href="https://www.cnn.com/2021/07/07/tech/microsoft-security-update/index.html">https://www.cnn.com/2021/07/07/tech/microsoft-security-update/index.html</a><br></div>
</div>===============================================<br>::The Lexington Computer and Technology Group Mailing List::<br>Reply goes to sender only; Reply All to send to list.<br>Send to the list: <a ymailto="mailto:LCTG@lists.toku.us" href="mailto:LCTG@lists.toku.us">LCTG@lists.toku.us</a> Message archives: <a href="http://lists.toku.us/private.cgi/lctg-toku.us" target="_blank">http://lists.toku.us/private.cgi/lctg-toku.us</a><br>To subscribe: email <a ymailto="mailto:lctg-subscribe@toku.us" href="mailto:lctg-subscribe@toku.us">lctg-subscribe@toku.us</a> To unsubscribe: email <a ymailto="mailto:lctg-unsubscribe@toku.us" href="mailto:lctg-unsubscribe@toku.us">lctg-unsubscribe@toku.us</a><br>Future and Past meeting information: <a href="http://LCTG.toku.us" target="_blank">http://LCTG.toku.us</a><br>List information: <a href="http://lists.toku.us/listinfo.cgi/lctg-toku.us" target="_blank">http://lists.toku.us/listinfo.cgi/lctg-toku.us</a><br>This message was sent to <a ymailto="mailto:bobprimak@yahoo.com." href="mailto:bobprimak@yahoo.com.">bobprimak@yahoo.com.</a><br>Set your list options: <a href="http://lists.toku.us/options.cgi/lctg-toku.us/bobprimak@yahoo.com" target="_blank">http://lists.toku.us/options.cgi/lctg-toku.us/bobprimak@yahoo.com</a></div>
</div>
</div></body></html>