mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-29 21:57:23 +00:00
Merged PR 9786: added window manager
added window manager
This commit is contained in:
commit
13e203d19a
@ -7,7 +7,7 @@ ms.mktglfcycl: deploy
|
||||
ms.sitesec: library
|
||||
ms.pagetype: security
|
||||
author: brianlic-msft
|
||||
ms.date: 04/19/2017
|
||||
ms.date: 07/13/2017
|
||||
---
|
||||
|
||||
# Increase scheduling priority
|
||||
@ -33,7 +33,7 @@ Constant: SeIncreaseBasePriorityPrivilege
|
||||
|
||||
### Best practices
|
||||
|
||||
- Allow the default value, Administrators, as the only account responsible for controlling process scheduling priorities.
|
||||
- Allow the default value, Administrators and Window Manager/Window Manager Group, as the only accounts responsible for controlling process scheduling priorities.
|
||||
|
||||
### Location
|
||||
|
||||
@ -48,11 +48,11 @@ The following table lists the actual and effective default policy values. Defaul
|
||||
| Server type or GPO | Default value |
|
||||
| - | - |
|
||||
| Default Domain Policy| Not defined|
|
||||
| Default Domain Controller Policy| Administrators|
|
||||
| Stand-Alone Server Default Settings | Administrators|
|
||||
| Domain Controller Effective Default Settings | Administrators|
|
||||
| Member Server Effective Default Settings | Administrators|
|
||||
| Client Computer Effective Default Settings | Administrators|
|
||||
| Default Domain Controller Policy| Not defined|
|
||||
| Stand-Alone Server Default Settings | Administrators and Window Manager/Window Manager Group|
|
||||
| Domain Controller Effective Default Settings | Administrators and Window Manager/Window Manager Group|
|
||||
| Member Server Effective Default Settings | Administrators and Window Manager/Window Manager Group|
|
||||
| Client Computer Effective Default Settings | Administrators and Window Manager/Window Manager Group|
|
||||
|
||||
## Policy management
|
||||
|
||||
@ -83,11 +83,11 @@ A user who is assigned this user right could increase the scheduling priority of
|
||||
|
||||
### Countermeasure
|
||||
|
||||
Verify that only Administrators have the **Increase scheduling priority** user right assigned to them.
|
||||
Verify that only Administrators and and Window Manager/Window Manager Group have the **Increase scheduling priority** user right assigned to them.
|
||||
|
||||
### Potential impact
|
||||
|
||||
None. Restricting the **Increase scheduling priority** user right to members of the Administrators group is the default configuration.
|
||||
None. Restricting the **Increase scheduling priority** user right to members of the Administrators group and and Window Manager/Window Manager Group is the default configuration.
|
||||
|
||||
## Related topics
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user