CVE-2021-1675

Disabling spooler on just your DC's is not enough.

PrintNightmare uses the MS-RPRN RpcAddPrinterDriverEx function while SharpPrintNightmare uses the Win32 AddPrinterDriverEx function and they both operate in a different way. With the Win32 API we can add drivers as domain users to servers that we couldn't do with MS-RPRN

( @cube0x0 )