Specify the list of Users to 'Increase a process working set'
|ID: oval:org.secpod.oval:def:36533||Date: (C)2016-08-05 (M)2017-10-18|
|Class: COMPLIANCE||Family: windows|
This privilege determines which user accounts can increase or decrease the size of a process's working set. The working set of a process is the set of memory pages currently visible to the process in physical RAM memory. These pages are resident and available for an application to use without triggering a page fault. The minimum and maximum working set sizes affect the virtual memory paging behavior of a process.
When configuring a user right in the SCM enter a comma delimited list of accounts. Accounts can be either local or located in Active Directory, they can be groups, users, or computers.
Certain environments can help mitigate this risk by limiting which users can increase the process working set.
Users will be unable to increase the working set for their processes, which could degrade performance.
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Increase a process working set
(2) REG: ###
(3) WMI: root\rsop\computer
UserRight='SeIncreaseWorkingSetPrivilege' and precedence=1
|Microsoft Windows 10|