Printing RPC over TCP - disable the encryption

Lilia 1 Reputation point
2022-12-22T13:57:48.437+00:00

Hi, is there a way to disable the encryption when Windows client prints using the RPC SPOOLSS over TCP (recent enforcement of Win11)?
Domain policy or any other direction?

https://support.microsoft.com/en-us/topic/managing-deployment-of-printer-rpc-binding-changes-for-cve-2021-1678-kb4599464-12a69652-30b9-3d61-d9f7-7201623a8b25

The question is not how to disable the new policy, but how to make it non encrypted on the client side,
that is disable RPC level Privacy, and downgrade it to just Integrity.

Windows Open Specifications
Windows Open Specifications
Windows: A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.Open Specifications: Technical documents for protocols, computer languages, standards support, and data portability. The goal with Open Specifications is to help developers open new opportunities to interoperate with Windows, SQL, Office, and SharePoint.
39 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Sreekanth Nadendla 401 Reputation points Microsoft Employee
    2023-01-13T14:31:15.1066667+00:00

    Hi Lilia, there is no supported mechanism to turn off encryption with just the authentication enabled.

    Regards,

    Sreekanth Nadendla

    Microsoft Windows Open Specifications

    0 comments