Detections
Analytics

1.1.4.41 Set 'Create a token object' to 'No One'

Information

This policy setting allows a process to create an access token, which may provide elevated rights to
access sensitive data.

Solution

Make sure no one has the user right 'Create a token object'

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(7)(b), CSCv6|5.1

Plugin: Windows

Control ID: f0a912c551b4dd943b950fe6ad3b999bec0a6ba041c938e6872c3537fc576da2