1.1.4.22 Set 'Profile system performance' to 'NT SERVICE\WdiServiceHost,Administrators'

Information

This policy setting allows users to use tools to view the performance of different system processes,
which could be abused to allow attackers to determine a system's active processes and provide insight
into the potential attack surface of the computer.

Solution

Make sure 'Profile system performance' is set to Administrators and NT SERVICE\WdiServiceHost.

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(7)(b), CSCv6|5.1

Plugin: Windows

Control ID: b5e980c7f0561f8e2dda61ec019b38d9e347c5b664584982e5640b35cbdd4f72