Invoke - Intel SA 00075 Remove Local Management Service - Windows
Log In or Register to download the BES file, and more.

1 Votes

Description

This Fixlet removes the LMS service from unprovisioned computers with Intel® Active Management Technology (AMT), Intel® Standard Manageability (ISM), and Intel® Small Business Technology (SBT).

You must run the, Fixlet: "Invoke - Intel SA 00075 Probe - Windows" on a machine and it must report "Not Provisioned" for the ME Provisioning State to be relevant for this Fixlet. For this reason, this Fixlet is not relevant if the computer is provisioned for AMT.

If the computer is privisioned for AMT please use the Fixlet: "Invoke - Intel SA 00075 Unprovision Active Management Technology - Windows" to unprovision AMT prior to removing the LMS. You will have to reboot the computer prior to running the Probe again after unprovisioning AMT.

More information on this vulnerability is available here: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory


Property Details

ID24275
TitleInvoke - Intel SA 00075 Remove Local Management Service - Windows
DomainBESC
SourceInternal
Source Release Date5/9/2017 12:00:00 AM
Added by on 5/12/2017 1:52:32 PM
Last Modified by on 5/12/2017 1:52:32 PM
Counters 3593 Views / 86 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Relevance

isWindows (Relevance 1172)
Used in 1129 fixlets and 533 analyses   * Results in a true/false
Show indented relevance
windows of operating system
Used in 8 fixlets and 1 analsis   * Results in a true/false
Show indented relevance
(brand string of main processor as lowercase) contains "intel"
Used in 1 fixlet   * Results in a true/false
Show indented relevance
exists values "ME Provisioning State" whose (it = "Not Provisioned") of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Intel\Setup and Configuration Software\INTEL-SA-00075 Discovery Tool\ME Firmware Information" of x32 registry
Used in 1 fixlet   * Results in a true/false
Show indented relevance
exists display names whose (it contains "Local Management Service") of service "LMS"

Actions

Action 1 (default)

Action Link Click here to deploy this action.
Script Type BigFix Action Script
waithidden net stop LMS /y
waithidden sc config LMS start=disabled
waithidden sc delete LMS
Success Criteria

This action will be considered successful when all lines of the action script have completed successfully.


Sharing

Social Media:
Share this page on Yammer

Comments