PrintNightmare: Kicking users from Pre-Windows 2000 legacy group may thwart domain controller exploitation

While Uncle Sam recommends shutting down print spooler service

Another potential mitigation has emerged for the PrintNightmare zero-day vuln, which lets low-privileged users execute code as SYSTEM on Windows domain controllers: remove those people from a backwards-compatibility group.…

from The Register