This message was deleted.

Can add in GPO lockdown do not accept client connections.

Patch it! https://support.microsoft.com/en-us/topic/july-6-2021-kb5004947-os-build-17763-2029-out-of-band-71994811-ff08-4abe-8986-8bd3a4201c5d

I saw the release of the patch after asking the question. I am pretty sure that there are some environments which don’t see the patch within the next four weeks or so. I am interested in the mitigation steps in EUC envs b/c printing is necessary (let’s say it this way). Gentilkiwi (the guy behind Mimikatz) has a good flowchart which seems more accurate than the mitigation steps in MSRC article…

We disabled remote printing with gpo and disabled the spooler where not needed. Yesterdays Patch is not enough