Patching printnightmare bug in win7 is a nightmare

[Davidk101]

For several days after this was announced, I watched the update channel for the patch. nothing. Then I poked more deeply - and for win7, if you don't have extended support, it won't happen via that channel. But links lead you the update catalog page, and it is there. Download and execute, gets an error: update the windows modules installer, and try again. Follow the links to update the module installer and that page is no longer available. There's nowhere to go from here.
If MS really expects the 15% of win7 users to patch their OS for such a severe bug that MS goes out of support to fix it with this weirdo and unusual approach, they will be disappointed.
So, is there a way around the MS snafu, or will home win7 users just have to live with printnightmare???

 

[HenriK37]

I have the same problem as Davidk101. Anyone have any guidance, particularly step-by-step guidance for those of us without superior technical skills?

 

[flavallee]

Your Windows 7 SP1 computer needs to be set up and configured for ESU support in order to receive and install the PrintNightmare security update (and other post-January 2020 updates).

Unfortunately, it was discovered after the update was released that it doesn't fix the issue.

Let's see what Microsoft does about it before "patch Tuesday" on July 13th.

 

[HenriK37]

So, for those of us not set up for ESU, things appear to be that we have to await Microsoft's solution on allowing the print spooler fix to load absent ESU.

 

[Jeff Davis]

This site mentions disabling the print spooler service. Is that enough for now?: Microsoft security update: urgent warning on PrintNightmare to update your PC immediately - CNN

 

[Davidk101]

ESU is extended support - the sort of thing a large company using win7 might do/pay for, but home users generally don't have this because it costs. So, home users - the largest contingent of win7 users, probably - are swinging in the wind: MS announced a bug serious enough to go post end-of-life with a fix, but they can't get and apply it. Finding that out after release is not only poor testing, but makes it seem that MS does not think about home users at all.

Disabling the spooler has been suggested elsewhere, but if you read the details in the services.msc list, this action means you cannot print at all. At least with the current state, printing works and there is just a large risk. If you disable the spooler, printing is kaput. As always, the best security is to not use the subject device . . . . not using a PC also falls into that category. Something MS may want to think about.

 

[EdPell]

Minimizing the threat

I rarely need to print anything nowadays.

If I stop the Print Spooler in Services and turn it back on only on those rare days when I need to print a page, have I minimized my exposure? Or could Nightmare be lurking in the darkness just waiting to pounce the second the Spooler is restarted.

 

[bendipa]

Three Win7 security updates were automatically downloaded on my PC today, KB3118401, KB2676562, KB3123479.

At least I presume that's what they are for.

 

[Davidk101]

Bendipa,
Those 3 KB's are old (2012- 2016) windows and security updates. Most certainly not related to print nightmare, unless MS thinks they are a necessary precursor to a patch.

I had to really search the installed updates on my win7 machine to find them, but they were there. They were installed when I tried to execute the printnightmare patch and got my update the modules installer error, which looked like this: attached image

 

[Megahertz07]

Single file with all updates - Simplix install the patch

 

[Davidk101]

Megahertz attached a link to a thing called simplix that allegedly covers all win7 updates. But reading it, there are pages and pages about it, running manually, bypassing some things, and involving .net updates. And all the posts dated before print nightmare. Complicated, to say the least, and there's no reference in those posts to print nightmare.
I have applied all the recommended patches that have been issued up to the eol date (14 Jan 2020 - altho some of those came thru up to a week later because of the way windows updates runs) including the .net updates.

So, for the unedified re simplix,
- what is it?
- does it do the print nightmare patch (any respondents successfully done?)
- to just get the print nightmare update, instructions please.

 

[Megahertz07]

So, for the unedified re simplix,
- what is it? It is a single file with ALL updates including print nightmare. Very good, specially if you just installed Win 7.
- does it do the print nightmare patch (any respondents successfully done?) Yes
- to just get the print nightmare update, instructions please. Don't know how. If you get it from M$ catalog it won't install.

The last Simplix Version is UpdatePack7R2-21.7.7.exe

 

[Davidk101]

Just re-read this last post. It seems to say that running simplix, if you have all the updates already installed, it will just do the printnightmare patch? ????

So far, in several threads that deal with MS issues, and where the problems of installing the printnightmare patch have been raised, there has been no definitive MS response at all.