Who is the perv ...
... at the keyhole looking at Winnie The Pooh using the toilet?
Russian spies are exploiting a years-old Windows print spooler vulnerability and using a custom tool called GooseEgg to elevate privileges and steal credentials across compromised networks, according to Microsoft Threat Intelligence. Redmond's threat hunters on Monday published findings from the team's investigation into the …
Additionally, Redmond suggests disabling print spooler on domain controllers, since this service isn't required for domain controller operations anyway.
This implies the spooler is enabled by default. If Redmond were really leaving such services running during the initial setup of a DC, may I assume they have since reviewed this rather short-sighted practice and current versions of their installer only enable services a DC needs to have running - or at least presents the instalee (is that a word?) with a list of services to start or block so they can make an informed choice about which holes they want poked through their attack surface.
Sure, it's an issue and it wouldn't be a terrible idea to disable it automatically when a box is DCPromo'd (is that even still a thing?) or at least make it something that you have to opt in to enable.
But there are plenty of orgs out there with small enough environments that their main/only server does everything inc. DC and print so as a problem, it's always going to be there.
(is that even still a thing?)
Yup. Sure is.
main/only server does everything inc. DC and print so as a problem, it's always going to be there.
If they are that small perhaps they should use the two VM Hyper-V license they get with Windows and have one VM being the DC, the other doing everything else? DCs should DC and nothing else - I know many don't, even on larger networks where the admin/configuration people should know better.
Nice to see that the GRU are up on archaic English traditions. Perhaps they read about it in the same guide book as their compatriots boned up on Salisbury Cathedral.
A wayzgoose was at one time an entertainment given by a master printer to his workmen each year on or about St Bartholomew's Day.