Approved

PrintNightMare Spooler Service Check

-- FIND SYSTEMS WITH PRINT SPOOLER RUNNING

SELECT name, status, start_type, user_account,

 

CASE

WHEN status = 'RUNNING' THEN ' Exposed to unpatched vulnerabilities inc. PrintNightmare'

WHEN status ='STOPPED' THEN ' NOT exposed to unpatched vulnerabilities inc. PrintNightmare'

              END AS SpoolerCheck,

CASE

WHEN start_type = 'AUTO_START' THEN 'Set Spooler to DISABLED'

END AS ServiceCheck

 

FROM services WHERE name= 'Spooler';