Can anyone help me to understand what kind of action I should take to mitigate this issue, which emerged from Microsoft Surface Attack Analyzer? How I can tighten the ACL? Is there a standard procedure to do?
Service BFE is vulnerable to tampering by multiple non-administrator accounts. Description: The service BFE is vulnerable to tampering by multiple non-administrator accounts. Details: Service: BFE Registry keys writable by: Key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BFE\Parameters\Policy\Persistent\Callout Account Rights NT SERVICE\BFE (S-1-5-80-1383140227-27657646-1662666058-2710981023-2300958487) KEY_SET_VALUE Local Service (S-1-5-19) WRITE_DAC Action: The relevant ACL(s) must be tightened.