Take ownership of files or other objects
|ID: oval:org.secpod.oval:def:36542||Date: (C)2016-08-05 (M)2018-07-10|
|Class: COMPLIANCE||Family: windows|
This security setting determines which users can take ownership of any securable object in the system, including Active Directory objects, files and folders, printers, registry keys, processes, and threads.
Assigning this user right can be a security risk. Since owners of objects have full control of them, only assign this user right to trusted users.
Ensure that only the local Administrators group has the Take ownership of files or other objects user right.
None. This is the default configuration.
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Take ownership of files or other objects
(2) REG: ###
(3) WMI: root\rsop\computer#RSOP_UserPrivilegeRight#AccountList#UserRight='SeTakeOwnershipPrivilege' and precedence=1
|Microsoft Windows 10|