Where can I find the 2018 r2 PrintNightmare patch?

Mohammed 21 Reputation points
2021-07-21T23:16:28.833+00:00

If you have the Microsoft catalog link to it pls send ty.

Windows for business | Windows Server | User experience | Other
{count} votes

5 answers

Sort by: Most helpful
  1. Anonymous
    2021-07-22T00:26:07.337+00:00

    Guessing you meant 2008 R2?

    Here you go.
    https://support.microsoft.com/en-us/topic/july-6-2021-kb5004953-monthly-rollup-out-of-band-b0e3bd48-924b-45c5-8b54-d8317aa62901
    https://www.catalog.update.microsoft.com/Search.aspx?q=KB5004953

    but also note that end of support for 2008 R2 was January 14, 2020 unless you have purchased extended security updates.
    https://learn.microsoft.com/en-us/windows-server/get-started/extended-security-updates

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  2. Teemo Tang 11,466 Reputation points
    2021-07-22T02:01:12.5+00:00

    Hi Bob,

    Microsoft never releases a Windows Server version called 2018 r2. They only release the following LTSC channel Server versions:
    Windows Server 2003 (April 2003)
    Windows Server 2003 R2 (December 2005)
    Windows Server 2008 (February 2008)
    Windows Server 2008 R2 (October 2009)
    Windows Server 2012 (September 2012)
    Windows Server 2012 R2 (October 2013)
    Windows Server 2016 (September 2016)
    Windows Server 2019 (October 2018)
    Windows Server 2022 (In preview)

    And the following SAC channel versions:
    Windows Server, version 1709 (September 2017)
    Windows Server, version 1803
    Windows Server, version 1809
    Windows Server, version 1903
    Windows Server, version 1909
    Windows Server, version 2004
    Windows Server, version 20H2

    Therefore, you need to confirm the specific version of your server then find the corresponding PrintNightmare patch.
    Server 2008 R2(end of support in 2021, need ESU)
    https://www.catalog.update.microsoft.com/Search.aspx?q=KB5004953

    Server 2012 R2
    https://www.catalog.update.microsoft.com/Search.aspx?q=kb5004954

    Sever 2016
    https://www.catalog.update.microsoft.com/Search.aspx?q=kb5004948

    Server 2019
    https://www.catalog.update.microsoft.com/Search.aspx?q=kb5004947

    -------------------------------------------------------------------------------------

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  3. Anonymous
    2021-07-22T11:40:48.263+00:00

    Just checking if there's any progress or updates?

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    0 comments No comments

  4. SUNOJ KUMAR YELURU 15,491 Reputation points MVP Volunteer Moderator
    2021-07-22T01:20:12.423+00:00

    Hi @Mohammed

    Download KB's from microsoft website
    https://msrc.microsoft.com/update-guide

    https://support.microsoft.com/en-us/topic/july-6-2021-kb5004954-monthly-rollup-out-of-band-8e7742b6-8a42-41ab-86dd-0dd0b36b4139

    You could refer to the below url:
    https://support.microsoft.com/en-us/topic/july-6-2021-kb5004951-security-only-update-out-of-band-e05a81cd-9b45-4622-b715-ddb2367bca47

    'Workarounds'
    Determine if the Print Spooler service is running

    Run the following in Windows PowerShell:

    Get-Service -Name Spooler

    If the Print Spooler is running or if the service is not set to disabled, select one of the following options to either disable the Print Spooler service, or to Disable inbound remote printing through Group Policy:

    Option 1 - Disable the Print Spooler service

    If disabling the Print Spooler service is appropriate for your enterprise, use the following PowerShell commands:

    Stop-Service -Name Spooler -Force

    Set-Service -Name Spooler -StartupType Disabled

    Impact of workaround Disabling the Print Spooler service disables the ability to print both locally and remotely.

    Option 2 - Disable inbound remote printing through Group Policy

    You can also configure the settings via Group Policy as follows:

    Computer Configuration / Administrative Templates / Printers

    Disable the “Allow Print Spooler to accept client connections:” policy to block remote attacks.

    You must restart the Print Spooler service for the group policy to take effect.
    https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527

    KB5005010: Restricting installation of new printer drivers after applying the July 6, 2021 updates
    https://support.microsoft.com/en-us/topic/kb5005010-restricting-installation-of-new-printer-drivers-after-applying-the-july-6-2021-updates-31b91c02-05bc-4ada-a7ea-183b129578a7

    If the Answer is helpful, please click Accept Answer and up-vote, this can be beneficial to other community members.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.