Details

Create permanent shared objects

This user right determines which accounts can be used by processes to create a directory object using the object manager.

This user right is used internally by the operating system and is useful to kernel-mode components that extend the object namespace. Because components that are running in kernel mode already have this user right assigned to them, it is not necessary to specifically assign it.

Default: None.

Solution

Policy Path: Local PoliciesUser Rights Assignment
Policy Name: Create permanent shared objects

Supportive Information

The following resource is also helpful.

• https://www.microsoft.com/en-us/download/details.aspx?id=55319

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.

References

• 800-53|AC-6(7)(b)
• CSCv6|5.1

Source

• Tenable.com/audits