1.1.4.10 Set 'Create global objects' to 'Administrators, SERVICE, LOCAL SERVICE, NETWORK SERVICE'

Information

This policy setting determines whether users can create global objects that are available to all sessions.

Solution

Make sure 'Create global objects' is set to administrators, service, local service and network service.

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(7)(b), CSCv6|5.1

Plugin: Windows

Control ID: 4b34d7a95907e5a9936bd48e883003473aef36ce8d4c506656a71386e5f6cd47