2.2.40 Ensure 'Take ownership of files or other objects' is set to 'Administrators'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting allows users to take ownership of files, folders, registry keys, processes, or threads.

This user right bypasses any permissions that are in place to protect objects to give ownership to the specified user.

The recommended state for this setting is: 'Administrators'.

Solution

To establish the recommended configuration via GP, set the following UI path to 'Administrators':

Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Take ownership of files or other objects

See Also

https://workbench.cisecurity.org/files/1941