Disabling the print spooler
It is best practice since “Print Nightmare ” to not enable the print spooler service on servers especially domain controllers. It is best to move this service to another host.
To disable the print spooler, open the Services MMC find the Print Spooler service stop it and change the startup to disabled.
To disable the Print Spooler through group policy, select a GPO
- Create a GPO in this domain, name your GPO Disable Spooler Service and click OK
- Right-click on your new GPO and select Edit
- Navigate to Configuration > Windows Settings > Security Settings > System Services
- Double-click on Print Spooler
- Select Define this policy setting
- Select Disabled and click Apply and OK