2.2.13 Ensure 'Create a pagefile' is set to 'Administrators'

Information

This policy setting allows users to change the size of the pagefile. By making the pagefile extremely large or extremely small, an attacker could easily affect the performance of a compromised computer.

The recommended state for this setting is: Administrators.

Rationale:

Users who can change the page file size could make it extremely small or move the file to a highly fragmented storage volume, which could cause reduced computer performance.

Impact:

None - this is the default behavior.

Solution

To establish the recommended configuration via GP, set the following UI path to Administrators:

Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create a pagefile




Default Value:

Administrators.

Additional Information:

This Benchmark Recommendation maps to:

Microsoft Windows Server 2016 Security Technical Implementation Guide
Version 1, Release 13, Benchmark Date: May 15, 2020

Vul ID: V-73745
Rule ID: SV-88409r2_rule
STIG ID: WN16-UR-000080
Severity: CAT II

See Also

https://workbench.cisecurity.org/files/2940