mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-29 21:57:23 +00:00
Merged PR 9786: added window manager
added window manager
This commit is contained in:
commit
13e203d19a
@ -7,7 +7,7 @@ ms.mktglfcycl: deploy
|
|||||||
ms.sitesec: library
|
ms.sitesec: library
|
||||||
ms.pagetype: security
|
ms.pagetype: security
|
||||||
author: brianlic-msft
|
author: brianlic-msft
|
||||||
ms.date: 04/19/2017
|
ms.date: 07/13/2017
|
||||||
---
|
---
|
||||||
|
|
||||||
# Increase scheduling priority
|
# Increase scheduling priority
|
||||||
@ -33,7 +33,7 @@ Constant: SeIncreaseBasePriorityPrivilege
|
|||||||
|
|
||||||
### Best practices
|
### Best practices
|
||||||
|
|
||||||
- Allow the default value, Administrators, as the only account responsible for controlling process scheduling priorities.
|
- Allow the default value, Administrators and Window Manager/Window Manager Group, as the only accounts responsible for controlling process scheduling priorities.
|
||||||
|
|
||||||
### Location
|
### Location
|
||||||
|
|
||||||
@ -48,11 +48,11 @@ The following table lists the actual and effective default policy values. Defaul
|
|||||||
| Server type or GPO | Default value |
|
| Server type or GPO | Default value |
|
||||||
| - | - |
|
| - | - |
|
||||||
| Default Domain Policy| Not defined|
|
| Default Domain Policy| Not defined|
|
||||||
| Default Domain Controller Policy| Administrators|
|
| Default Domain Controller Policy| Not defined|
|
||||||
| Stand-Alone Server Default Settings | Administrators|
|
| Stand-Alone Server Default Settings | Administrators and Window Manager/Window Manager Group|
|
||||||
| Domain Controller Effective Default Settings | Administrators|
|
| Domain Controller Effective Default Settings | Administrators and Window Manager/Window Manager Group|
|
||||||
| Member Server Effective Default Settings | Administrators|
|
| Member Server Effective Default Settings | Administrators and Window Manager/Window Manager Group|
|
||||||
| Client Computer Effective Default Settings | Administrators|
|
| Client Computer Effective Default Settings | Administrators and Window Manager/Window Manager Group|
|
||||||
|
|
||||||
## Policy management
|
## Policy management
|
||||||
|
|
||||||
@ -83,11 +83,11 @@ A user who is assigned this user right could increase the scheduling priority of
|
|||||||
|
|
||||||
### Countermeasure
|
### Countermeasure
|
||||||
|
|
||||||
Verify that only Administrators have the **Increase scheduling priority** user right assigned to them.
|
Verify that only Administrators and and Window Manager/Window Manager Group have the **Increase scheduling priority** user right assigned to them.
|
||||||
|
|
||||||
### Potential impact
|
### Potential impact
|
||||||
|
|
||||||
None. Restricting the **Increase scheduling priority** user right to members of the Administrators group is the default configuration.
|
None. Restricting the **Increase scheduling priority** user right to members of the Administrators group and and Window Manager/Window Manager Group is the default configuration.
|
||||||
|
|
||||||
## Related topics
|
## Related topics
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user