Windows Print Spooler service

URI: https://gptkb.org/entity/Windows_Print_Spooler_service
GPTKB entity
Statements (50)
Predicate Object
gptkbp:instanceOf Windows service
print spooler
gptkbp:accessibleBy administrators
system processes
users (with permissions)
gptkbp:affects gptkb:CVE-2021-1675
gptkb:CVE-2021-34527
gptkbp:auditedBy gptkb:Event_Viewer
gptkbp:canBe remote attackers (if vulnerable)
gptkbp:canBeDisabled true
gptkbp:canBeManagedBy gptkb:Services_MMC_snap-in
gptkb:PowerShell
command line
gptkbp:canBePatchedBy gptkb:Windows_Update
gptkbp:canBeRestarted true
gptkbp:canBeRestartedBy task manager
services.msc
net stop/start spooler
gptkbp:canBeRestartedLocally true
gptkbp:canBeRestartedRemotely true
gptkbp:canBeRestartedViaScript true
gptkbp:canBeStopped true
gptkbp:category public service
gptkbp:cause security risks if misconfigured
gptkbp:configuration breed registry
gptkbp:criticalFor printing functionality
gptkbp:defaultStartupType Automatic
gptkbp:developedBy gptkb:Microsoft
gptkbp:executableName spoolsv.exe
gptkbp:function manages print jobs
queues print jobs
sends print jobs to printers
https://www.w3.org/2000/01/rdf-schema#label Windows Print Spooler service
gptkbp:introducedIn gptkb:Windows_NT
gptkbp:logFile System Event Log
gptkbp:monitors gptkb:Performance_Monitor
gptkbp:operatingSystem gptkb:Microsoft_Windows
gptkbp:relatedTo printing
network printing
printer drivers
gptkbp:runsOn Local System
gptkbp:service gptkb:Spooler
gptkbp:status running (by default)
gptkbp:supports network printing
shared printers
local printing
gptkbp:usedBy Windows printing subsystem
gptkbp:vulnerableTo gptkb:PrintNightmare
gptkbp:bfsParent gptkb:PrintNightmare
gptkbp:bfsLayer 7