---
title: "PrintNightmare Fix: Resolving the PrintNightmare for Windows"
description: Tricerat tackles how to best keep print management flowing with a PrintNightmare Fix after the update that lead to issues for Windows users
---

[Tricerat Blog ](https://www.tricerat.com/blog)

# [PrintNightmare Fix: Resolving the PrintNightmare for Windows](https://www.tricerat.com/blog/fixing-the-printnightmare-for-windows)

 Written by [Tricerat](https://www.tricerat.com/blog/author/tricerat) | Jul 14, 2021 7:21:14 PM

On June 30, a Windows vulnerability was made known and called Windows Print Spooler Remote Code Execution Vulnerability, or [CVE-2021-34527](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527), and referred to as “PrintNightmare”. Several possible PrintNightmare fixes became known which are discussed below for compatibility with Tricerat printing products

## Updates from Microsoft

On July 6, 2021, Microsoft released [emergency patches](https://support.microsoft.com/en-us/topic/july-6-2021-kb5004958-security-only-update-out-of-band-d439df52-8f5a-4cb8-9d0d-c2f1bb036a5e) to address the vulnerability. After preliminary testing at Tricerat, [ScrewDrivers®](https://www.tricerat.com/enterprise-print-management-products-v7) is compatible with this Microsoft update and can safely be applied to desktops and servers. It is strongly advised to test this update with ScrewDrivers in your environment to confirm functionality prior to large-scale rollout. While these patches address the initial vulnerability, they do not completely fix the PrintNightmare issue.

## Denying Access to Spool Folder

The blog [truesec](https://blog.truesec.com/2021/06/30/fix-for-printnightmare-cve-2021-1675-exploit-to-keep-your-print-servers-running-while-a-patch-is-not-available/) reported another attempted PrintNightmare fix that creates an explicit deny permission for SYSTEM on the spool folder. This alone will break Tricerat ScrewDrivers printing if done on VDI, terminal servers, or print servers. To use this permission setting with Tricerat, modify the permissions specifically on the following files to allow SYSTEM to have full control permissions.

v7:

`C:\Windows\System32\spool\drivers\x64\3\ScrewDriversDrv.dll`  
`C:\Windows\System32\spool\drivers\x64\3\ScrewDriversUI.dll`

v6:

`C:\Windows\System32\spool\drivers\x64\3\sd6drv.dll`  
`C:\Windows\System32\spool\drivers\x64\3\sd6ui.dll`

## Disabling the Print Spooler

The initial recommendation from Microsoft was to turn off the print spooler service. Be advised that if the print spooler is turned off on the session desktop, print server, or remote desktop client, printing will not work. This applies to Tricerat ScrewDrivers and any other type of printing.

[View full post](https://www.tricerat.com/blog/fixing-the-printnightmare-for-windows)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Tricerat"
  },
  "dateModified" : "2021-11-05T21:09:23.309Z",
  "datePublished" : "2021-07-14T19:21:14Z",
  "headline" : "PrintNightmare Fix: Resolving the PrintNightmare for Windows",
  "image" : {
    "@type" : "ImageObject",
    "height" : 300,
    "url" : "https://f.hubspotusercontent40.net/hubfs/4048097/FixingthePrintNightmare.png",
    "width" : 600
  },
  "mainEntityOfPage" : "https://www.tricerat.com/blog/fixing-the-printnightmare-for-windows",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/4048097/Tricerat_AMP.png",
      "width" : 600.0
    },
    "name" : "Tricerat Blog"
  }
}
```