Windows 10: How to Manage Print Spooler Service Remotely Without Domain Admin Rights on DC-Server

We have a Windows Server 2019 domain environment where our print server is hosted on a domain controller DC. I am an administrator but do not have Domain Admin privileges. My supervisor has granted me elevated permissions to manage printers and print queues via Group Policy.However, I also need the ability to remotely view all services and restart the Print Spooler service on the print server using the MMC Services console. Currently, I receive an "Access Denied" error when trying to do this from a domain-joined workstation.I have already:Configured WMI permissions root\cimv2 via wmimgmt.m

:)

 

Windows Print Spooler Remote Code Execution Vulnerability  

This exploit only affects Domain Controllers not workstations. I am not worried about it because our Windows workstation rarely gets used and in no way is not a Windows Server Edition or behaves as a DC. Workaround for the Windows Print Spooler Remote Code Execution Vulnerability - gHacks Tech News

Stopping the Spooler service means jobs are going to sit on the machine until you physically go into the folder to purge them out.

 

Print Spooler Service Not Running

getting Active Directory Domain Services is currently unavailable.

Windows Print Spooler Service could not be started

tried suggestion one, but stop button is not available when I go to Print Spooler

 

Windows Print Spooler Remote Code Execution Vulnerability  

Thank you , sir.

This post answered a question, I had logged back in, to pose.

In my situation, there was no need to 'Disable', this, apparently.

My ignorance. No other excuse.

Just wanted to take measures to be secure. *Smile

- - - Updated - - -

@bro67

Should I go back into Group Editor, and set this back from 'Disabled', to 'Not Configured'? or simply, leave it be?


Single desktop PC, hardwired behind router (no wifi). Have a USB connected printer, but never use it. System specs up to date.

Apologies for bothering you.

~~~~~

I welcome anyone else to answer, as well. *Smile

Thank you.