2.2.35 Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting allows users to use tools to view the performance of different system processes, which could be abused to allow attackers to determine a system's active processes and provide insight into the potential attack surface of the computer.

The recommended state for this setting is: 'Administrators, NT SERVICE\WdiServiceHost'.

Solution

To establish the recommended configuration via GP, set the following UI path to ''Administrators, NT SERVICE\WdiServiceHost'':

Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Profile system performance

See Also

https://workbench.cisecurity.org/files/1941