Skip to main content

Point and Print Nightmare Check

Summary

This script will check if the registry entry provided in the link below is detected.
If the registry is detected, it will determine if it is set to 0 or null.
If the above conditions are not met, then the script will report Point And Print as detected.

Time Saved by Automation: 10 Minutes

Sample Run

Sample Run

Dependencies

PrintNightMare Detection

Script States

NameExampleDescription
PointAndPrintPowershell OutputDetected - Meant registry entry found and not equal to 0
No Action Required - Safe

Process

  • This script will check for HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows NT/Printers/PointAndPrint/NoWarningNoElevationOnInstall and HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows NT/Printers/PointAndPrint/UpdatePromptSettings.
  • If any are found, then check for the value.
  • If the value is not set or is 0, then it is safe; else, record as Point And Print Detected.

Output

  • Script log
  • Script state
  • Dataview