Skip to main content

Point and Print Nightmare Check

Summary​

This script will check if the registry entry provided in the link below is detected.
If the registry is detected, it will determine if it is set to 0 or null.
If the above conditions are not met, then the script will report Point And Print as detected.

Time Saved by Automation: 10 Minutes

Sample Run​

Sample Run

Dependencies​

PrintNightMare Detection

Script States​

NameExampleDescription
PointAndPrintPowershell OutputDetected - Meant registry entry found and not equal to 0
No Action Required - Safe

Process​

  • This script will check for HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows NT/Printers/PointAndPrint/NoWarningNoElevationOnInstall and HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows NT/Printers/PointAndPrint/UpdatePromptSettings.
  • If any are found, then check for the value.
  • If the value is not set or is 0, then it is safe; else, record as Point And Print Detected.

Output​

  • Script log
  • Script state
  • Dataview

Changelog​

2025-04-10​

  • Initial version of the document