Detections
Analytics

1.257 WN11-UR-000125

Information

The 'Lock pages in memory' user right must not be assigned to any groups or accounts.

GROUP ID: V-253500
RULE ID: SV-253500r958726

Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities.

The 'Lock pages in memory' user right allows physical memory to be assigned to processes, which could cause performance issues or a DoS.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment >> 'Lock pages in memory'

to be defined but containing no entries (blank).

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CCI|CCI-002235, Rule-ID|SV-253500r958726_rule, STIG-ID|WN11-UR-000125, Vuln-ID|V-253500

Plugin: Windows

Control ID: ab541f7069a38a43dc2bd17b1f62d3681fa94114bca603c178c4127479f70319