diff --git a/ansible/roles/win_domain_controller/files/serverhardening0.3.ps1 b/ansible/roles/win_domain_controller/files/serverhardening0.3.ps1
index 94f7484..8fd7e0d 100644
--- a/ansible/roles/win_domain_controller/files/serverhardening0.3.ps1
+++ b/ansible/roles/win_domain_controller/files/serverhardening0.3.ps1
@@ -178,7 +178,7 @@ Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "RestrictAnonymous" -key
 Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "DisableDomainCreds" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" -Value 1 -Type DWord
 Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "UseMachineId " -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" -Value 1 -Type DWord
 Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "LmCompatibilityLevel " -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" -Value 5 -Type DWord
-Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "Start" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" -Value 4 -Type DWord
+Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "Start" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" -Value 2 -Type DWord
 Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "LogDroppedPackets" -key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging" -Value 1 -Type DWord
 
 
@@ -238,4 +238,4 @@ set-addefaultDomainPolicy -identity $domainid -complexityEnabled $true -lockoutd
 $domainguestid2 = $domainid + "_" + "guest" 
 get-aduser -identity 'guest' | Rename-AdObject -NewName $domainguestid2
 
-Write-Output "THIS SCRIPT ACTUALLY RAN" | Out-File -FilePath 'C:\eidf\HardenScript.txt'
\ No newline at end of file
+Write-Output "THIS SCRIPT ACTUALLY RAN" | Out-File -FilePath 'C:\eidf\HardenScript.txt'