Detections
Analytics

1.255 WN10-UR-000125

Information

The Lock pages in memory user right must not be assigned to any groups or accounts.

GROUP ID: V-220977RULE ID: SV-220977r958726

Inappropriate granting of user rights can provide system, administrative, and other high level capabilities.

The 'Lock pages in memory' user right allows physical memory to be assigned to processes, which could cause performance issues or a DoS.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment >> 'Lock pages in memory'

to be defined but containing no entries (blank).

See Also

https://workbench.cisecurity.org/benchmarks/23869

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CCI|CCI-002235, Rule-ID|SV-220977r958726_rule, STIG-ID|WN10-UR-000125, Vuln-ID|V-220977

Plugin: Windows

Control ID: 6ba4e377f6cb6befcb5b0ad42bde5b16546b554e2752183f9b4a354924ca73cb