Disable the Print Spooler on Domain Controllers (PrintNightmare Hardening via GPO)
The Print Spooler service (spoolsv.exe) runs by default on every Windows host. It manages print jobs, talks to printers, and historically has been one of the most fertile sources of…