Detections
Analytics

1.261 WN10-UR-000165

Information

The Take ownership of files or other objects user right must only be assigned to the Administrators group.

GROUP ID: V-220983RULE ID: SV-220983r958726

Inappropriate granting of user rights can provide system, administrative, and other high level capabilities.

Accounts with the 'Take ownership of files or other objects' user right can take ownership of objects and make changes.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment >> 'Take ownership of files or other objects'

to only include the following groups or accounts:

Administrators

See Also

https://workbench.cisecurity.org/benchmarks/23869

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CCI|CCI-002235, Rule-ID|SV-220983r958726_rule, STIG-ID|WN10-UR-000165, Vuln-ID|V-220983

Plugin: Windows

Control ID: f087f6a23415ddc0f43d9e7f3fbd9f625d25458ba4636b7a528c0a01d53d9fba