PrintNightmare .reg file mitigation

I didn't see this posted anywhere. If you are in a situation where you can issue remote commands but not apply Group Policy, you can apply this registry file instead (which does the same thing as disabling the "Allow Print Spooler to accept client connections" policy):

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers] "RegisterSpoolerRemoteRpcEndPoint"=dword:00000002

(copy into Notepad, save as `"Mitigate PrintNightmare.reg"` - the quotes will ensure that it saves with the right extension)

Or, a command you can run:

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers" /v RegisterSpoolerRemoteRpcEndPoint /t REG_DWORD 2

A restart of the computer or print spooler is required. You should restart the computer, because then it'll probably finish installing the cumulative update, and both CVEs will be mitigated.

This will make printer sharing not work anymore. Allegedly, already shared printers will still work, but I didn't try it. Printers shared to you will still work.