Skip to content

SMB Insecurely Configured Service Fix

Choose a tag to compare

@ServiceDeskCSI ServiceDeskCSI released this 30 Jul 20:46
· 1 commit to main since this release
6f3a2ca
  1. Run: sc sdshow "servicenamehere"

It will look something like this

D:(A;;CCLCRPWPSDRCWDWO;;;WD)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSD
RCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTL
OCRSDRCWDWO;;;WD)

  1. Run: psservice.exe security "servicenamehere" /accepteula

This is will output something easier to read

  1. Ran: SetACL.exe -on "servicenamehere" -ot srv -actn ace -ace "n:everyone;p:read"
  2. Run: sc sdshow "servicenamehere"

Tools from
https://learn.microsoft.com/en-us/sysinternals/downloads/pstools
https://helgeklein.com/download/