74.8 (L1) Ensure 'Create Page File' is set to 'Administrators'

Information

This policy setting allows users to change the size of the pagefile. By making the pagefile extremely large or extremely small, an attacker could easily affect the performance of a compromised computer.

The recommended state for this setting is: Administrators

Users who can change the page file size could make it extremely small or move the file to a highly fragmented storage volume, which could cause reduced computer performance.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Administrators

User Rights\Create Page File

Note: Include only one User or Group per line in the Settings Catalog configuration screen.

Impact:

None - this is the default behavior.

See Also

https://workbench.cisecurity.org/benchmarks/16852