I am using Microsoft's Attack Surface Analyzer, and I would like to get a better understanding of what would be the best way to mitigate the findings.
For example if in my report I get
Directories Containing Objects With Weak ACLs,
The folder C:\Program Files (x86)\My_Folder contains files and/or folders with ACLs that allow tampering by multiple non-administrator accounts.
"Action:" part of the report is as follows:
The ACL should be tightened. Do not allow users to write to start points, files or directories that influence control over other users.
In this case would an appropriate solution be to use a utility such icacls to change the ACL(s) of the Parent folder access to Administrator only access using a PowerShell script?
A different example I have is the
Services Vulnerable To Tampering,
The service My_Service is vulnerable to tampering by multiple non-administrator accounts.
"Action:" part of the report simply says
The relevant ACL(s) must be tightened.
In this case we are talking about service(s), and I don't have a clue where to go with that one...
Thanks ahead for your time and any help!