How to fix this "Fix unquoted service path for Windows services" using Intune?

Question

How to fix this "Fix unquoted service path for Windows services" using Intune?

Vinod Survase 4,781

This is part of Security recommendations in M365 defender for endpoints.

Pavel yannara Mirochnitchenko 13,336 Reputation points MVP

2023-05-30T17:57:53.83+00:00

Interesting, indeed this recommendation has no clear solution for policy or registery. In my enviroment only 1/15 has this recommendation because of specific service running. I am not sure, is this recommendation really important or not. You could skip it by accepting the risk.
Vinod Survase 4,781 Reputation points

2023-05-31T06:56:42.4166667+00:00

@Pavel yannara Mirochnitchenko

Thanks for reply on this.

We have more than 40 devices where this is showing in Defender portal.

What would be risk if we accept it as risk ?

1 answer

Your answer

Pavel yannara Mirochnitchenko 13,336 Reputation points MVP

2023-05-30T17:57:53.83+00:00

Interesting, indeed this recommendation has no clear solution for policy or registery. In my enviroment only 1/15 has this recommendation because of specific service running. I am not sure, is this recommendation really important or not. You could skip it by accepting the risk.
Vinod Survase 4,781 Reputation points

2023-05-31T06:56:42.4166667+00:00

@Pavel yannara Mirochnitchenko

Thanks for reply on this.

We have more than 40 devices where this is showing in Defender portal.

What would be risk if we accept it as risk ?

Answer 1

Lu Dai-MSFT 28,501

@Vinod Survase Thanks for posting in our Q&A.

Based on my search, I found that there is a blog showing how to create a Proactive Remediation in Intune for it. Here is the link：

https://powershellisfun.com/2023/05/03/intune-proactive-remediation-for-microsoft-windows-unquoted-service-path-cve-2013-1609cve-2014-0759cve-2014-5455/

Note: Non-Microsoft link, just for the reference.

Hope it will give you some ideas.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Vinod Survase 4,781 Reputation points

2023-05-31T06:52:13.36+00:00

Hi @Lu Dai-MSFT

Thanks for your reply on this. I have created Proactive Remediation in Intune for this but seems its not working or the current licenses are not capable enough to do this.

What would you recommend on this other than this licenses and requirements?
Pavel yannara Mirochnitchenko 13,336 Reputation points MVP

2023-05-31T09:10:12.89+00:00

You could just launch the powershell script deployment as-is.

Share via

How to fix this "Fix unquoted service path for Windows services" using Intune?

1 answer

Your answer