We\u2019re collecting a standard set of instructions to follow for all consultants to save time and have a standard approach for ths;<\/p>
\u00a0<\/p>
Client Updated; Print Server Not Updated (Reported Behaviour: Dial comes up do you trust the server, then asks credentials, when trying to print)<\/b><\/p>
Requires the following key on the\u00a0Client<\/b><\/p>
HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows NT\\Printers\\PointAndPrintRestrictDriverInstallationToAdministrators = 0 (REG_DWORD)<\/p>
Reboot afterwards<\/p>
Then at a later date we need to review workstation patching policies<\/p>
\u00a0<\/p>
Print Server Updated; Client Not Updated\u00a0 (Check for Cumulative Update September)<\/b><\/p>
Requires the following key on the\u00a0Server<\/b><\/p>
HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Print\\RpcAuthnLevelPrivacyEnabled =\u00a00 (REG_DWORD)<\/p>
Restart the print spooler on the server afterwards<\/p>
<\/p>
This key was put in place in January to mitigate cve-2021-1678 but not enforced until now.<\/p>
You\u2019re expected going to have this issue if your workstations haven\u2019t been updated since January but I\u2019ve seen a few cases with more recently updated workstations.<\/p>