Detections
Analytics

1.267 WN19-UR-000140

Information

Windows Server 2019 Increase scheduling priority: user right must only be assigned to the Administrators group.

GROUP ID:V-205761
RULE ID:SV-205761r958726

Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities.

Accounts with the 'Increase scheduling priority' user right can change a scheduling priority, causing performance issues or a denial of service.

Solution

Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment >> 'Increase scheduling priority' to include only the following accounts or groups:

 - Administrators

See Also

https://workbench.cisecurity.org/benchmarks/22176

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(7)(b)

Plugin: Windows

Control ID: 5c67e727e92b67767be997f9fdbd41a332b1e2a96f1c8df8e2db55b753b6738a