Detections
Analytics
WN16-UR-000250 - The Lock pages in memory user right must not be assigned to any groups or accounts.
Information
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities.The 'Lock pages in memory' user right allows physical memory to be assigned to processes, which could cause performance issues or a denial of service.
Solution
Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment >> 'Lock pages in memory' to be defined but containing no entries (blank).See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2016_V2R10_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2016 STIG v2r10
Category: ACCESS CONTROL
References: 800-53|AC-6(10), CAT|II, CCI|CCI-002235, Rule-ID|SV-225085r958726_rule, STIG-ID|WN16-UR-000250, STIG-Legacy|SV-88455, STIG-Legacy|V-73791, Vuln-ID|V-225085
Plugin: Windows
Control ID: bac26848992db87d1177a21182bee99fa15de6717a5c03e32e438404ec9bceeb