Ensure Printer Sharing Is Disabled

MediumLevel 1Automatedmacos

Description

By enabling Printer Sharing, the computer is set up as a print server to accept print jobs from other computers. Dedicated print servers or direct IP printing should be used instead.

How it is checked

Audit method: Shell command

shell

out=$(/usr/sbin/cupsctl 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -c "_share_printers=0" || true

Expected output: 1

How it is fixed

Fix method: Guidance or infrastructure patch

Terminal: sudo /usr/sbin/cupsctl --no-share-printers. GUI: System Settings > General > Sharing > Set Printer Sharing to disabled.

Properties

Operating systems: macos-26
Tags: macossystem-settings
Reference: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.3.3 Ensure Printer Sharing Is Disabled

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target macos