Hi Alec§taar,
Here's a security template file that sets the Alerter service security controls and permissions according to the CIS benchmark you're using. You can also use this (with the Windows secedit tool) to verify whether the settings are correct.
[Unicode]
Unicode=yes
[Version]
signature="$CHICAGO$"
Revision=1
[Service General Setting]
Alerter,4,"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
Here's a security template file that sets the Alerter service security controls and permissions according to the CIS benchmark you're using. You can also use this (with the Windows secedit tool) to verify whether the settings are correct.
[Unicode]
Unicode=yes
[Version]
signature="$CHICAGO$"
Revision=1
[Service General Setting]
Alerter,4,"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
I am doing 1 thing that may need doing here, per your advice... setting the services I got scored down on, to DISABLED.
I had many set as MANUAL (because some I actually DO USE, on occasion).
Hopefully, this will get my score up some... I am looking @ both the BELARC ADVISOR & the CIS TOOL for this.
APK