mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-14 10:03:22 +00:00
92 lines
4.3 KiB
Markdown
92 lines
4.3 KiB
Markdown
---
|
||
title: Increase scheduling priority (Windows 10)
|
||
description: Describes the best practices, location, values, policy management, and security considerations for the Increase scheduling priority security policy setting.
|
||
ms.assetid: fbec5973-d35e-4797-9626-d0d56061527f
|
||
ms.pagetype: security
|
||
ms.prod: W10
|
||
ms.mktglfcycl: deploy
|
||
ms.sitesec: library
|
||
author: brianlic-msft
|
||
---
|
||
# Increase scheduling priority
|
||
**Applies to**
|
||
- Windows 10
|
||
Describes the best practices, location, values, policy management, and security considerations for the **Increase scheduling priority** security policy setting.
|
||
## Reference
|
||
This policy setting determines which user accounts can increase the base priority class of a process. It is not a privileged operation to increase relative priority within a priority class. This user right is not required by administrative tools that are supplied with the operating system, but it might be required by software development tools.
|
||
Specifically, this security setting determines which accounts can use a process with Write Property access to another process to increase the run priority that is assigned to the other process. A user with this privilege can change the scheduling priority of a process through the Task Manager user interface.
|
||
Constant: SeIncreaseBasePriorityPrivilege
|
||
### Possible values
|
||
- User-defined list of accounts
|
||
- Not defined
|
||
- Administrators
|
||
### Best practices
|
||
- Allow the default value, Administrators, as the only account responsible for controlling process scheduling priorities.
|
||
### Location
|
||
Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\User Rights Assignment
|
||
### Default values
|
||
By default this setting is Administrators on domain controllers and on stand-alone servers.
|
||
The following table lists the actual and effective default policy values. Default values are also listed on the policy’s property page.
|
||
<table>
|
||
<colgroup>
|
||
<col width="50%" />
|
||
<col width="50%" />
|
||
</colgroup>
|
||
<thead>
|
||
<tr class="header">
|
||
<th align="left">Server type or GPO</th>
|
||
<th align="left">Default value</th>
|
||
</tr>
|
||
</thead>
|
||
<tbody>
|
||
<tr class="odd">
|
||
<td align="left"><p>Default Domain Policy</p></td>
|
||
<td align="left"><p>Not defined</p></td>
|
||
</tr>
|
||
<tr class="even">
|
||
<td align="left"><p>Default Domain Controller Policy</p></td>
|
||
<td align="left"><p>Administrators</p></td>
|
||
</tr>
|
||
<tr class="odd">
|
||
<td align="left"><p>Stand-Alone Server Default Settings</p></td>
|
||
<td align="left"><p>Administrators</p></td>
|
||
</tr>
|
||
<tr class="even">
|
||
<td align="left"><p>Domain Controller Effective Default Settings</p></td>
|
||
<td align="left"><p>Administrators</p></td>
|
||
</tr>
|
||
<tr class="odd">
|
||
<td align="left"><p>Member Server Effective Default Settings</p></td>
|
||
<td align="left"><p>Administrators</p></td>
|
||
</tr>
|
||
<tr class="even">
|
||
<td align="left"><p>Client Computer Effective Default Settings</p></td>
|
||
<td align="left"><p>Administrators</p></td>
|
||
</tr>
|
||
</tbody>
|
||
</table>
|
||
|
||
## Policy management
|
||
This section describes features, tools, and guidance to help you manage this policy.
|
||
A restart of the computer is not required for this policy setting to be effective.
|
||
Any change to the user rights assignment for an account becomes effective the next time the owner of the account logs on.
|
||
### Group Policy
|
||
Settings are applied in the following order through a Group Policy Object (GPO), which will overwrite settings on the local computer at the next Group Policy update:
|
||
1. Local policy settings
|
||
2. Site policy settings
|
||
3. Domain policy settings
|
||
4. OU policy settings
|
||
When a local setting is greyed out, it indicates that a GPO currently controls that setting.
|
||
## Security considerations
|
||
This section describes how an attacker might exploit a feature or its configuration, how to implement the countermeasure, and the possible negative consequences of countermeasure implementation.
|
||
### Vulnerability
|
||
A user who is assigned this user right could increase the scheduling priority of a process to Real-Time, which would leave little processing time for all other processes and could lead to a denial-of-service condition.
|
||
### Countermeasure
|
||
Verify that only Administrators have the **Increase scheduling priority** user right assigned to them.
|
||
### Potential impact
|
||
None. Restricting the **Increase scheduling priority** user right to members of the Administrators group is the default configuration.
|
||
## Related topics
|
||
[User Rights Assignment](user-rights-assignment.md)
|
||
|
||
|