PrintNightmare – ACL lock

<?xml version="1.0" encoding="utf-8"?>
<ScExport xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://www.kaseya.com/vsa/2008/12/Scripting">
  <Procedure name="PrintNightmare - ACL lock" treePres="3" id="1087429262" folderId="343145199419532" treeFullPath="myProcedures - NetworkDepot.Kyle.Test 2021">
    <Body description="Script Name: PrintNightmare - ACL lock&#xA;Script Desc: Changes ACL to prevent any printer modifications. This protects against PrinterNightmare, but must be reverted to make any changes to printers.&#xA;&#xA;Date: 7/1/2021&#xA;Company: Virtual Administrator&#xA;Author: Kyle&#xA;&#xA;(c) Copyright 2021 Network Depot, LLC (Virtual Administrator) ALL RIGHTS RESERVED.   This script is the property of Network Depot, LLC (dba VirtualAdministrator), and use is restricted to active clients.  Do not re-distribute without written authorization.">
      <If description="">
        <Condition name="Windows 32 or 64 Bit Check">
          <Parameter xsi:type="EnumParameter" name="Condition" value="Exists" />
        </Condition>
        <Then>
          <Statement name="Execute Powershell Command (64-bit, Run As System)" continueOnFail="false">
            <Parameter xsi:type="StringParameter" name="Parameter1" value="" />
            <Parameter xsi:type="StringParameter" name="Parameter2" value="$Path = 'C:\Windows\System32\spool\drivers';$ACL = Get-Acl $Path;$NewRule = New-Object System.Security.AccessControl.FileSystemAccessRule('System', 'Modify', 'ContainerInherit, ObjectInherit', 'None', 'Deny');$ACL.AddAccessRule($NewRule);Set-Acl $Path $ACL" />
            <Parameter xsi:type="StringParameter" name="Parameter3" value="True" />
          </Statement>
        </Then>
        <Else>
          <Statement name="Execute Powershell Command (32-bit, Run As System)" continueOnFail="false">
            <Parameter xsi:type="StringParameter" name="Parameter1" value="" />
            <Parameter xsi:type="StringParameter" name="Parameter2" value="$Path = 'C:\Windows\System32\spool\drivers';$ACL = Get-Acl $Path;$NewRule = New-Object System.Security.AccessControl.FileSystemAccessRule('System', 'Modify', 'ContainerInherit, ObjectInherit', 'None', 'Deny');$ACL.AddAccessRule($NewRule);Set-Acl $Path $ACL" />
            <Parameter xsi:type="StringParameter" name="Parameter3" value="True" />
          </Statement>
        </Else>
      </If>
      <Statement name="WriteScriptLogEntry" continueOnFail="false">
        <Parameter xsi:type="StringParameter" name="Comment" value="Ps Result: #global:psresult#" />
      </Statement>
    </Body>
  </Procedure>
</ScExport>
PrintNightmare – ACL lock

How to Download Scripts

Login Here

Search

Get In Touch!

Additional Resources

About Us
