Detections
Analytics

1.271 WN16-UR-000290

Information

The Profile single process user right must only be assigned to the Administrators group.

GROUP ID: V-225089
RULE ID: SV-225089r958726

Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities.

Accounts with the 'Profile single process' user right can monitor non-system processes performance. An attacker could use this to identify processes to attack.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment >> 'Profile single process'

to include only the following accounts or groups:

 - Administrators

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CAT|II, CCI|CCI-002235, Rule-ID|SV-225089r958726_rule, STIG-ID|WN16-UR-000290, Vuln-ID|V-225089

Plugin: Windows

Control ID: a571eda42df46cb17f94a8862aa7b44451f9e677efafb060fea5fe2dd7f9b0f3