WinSecWiki

WinSecWiki » Windows Security Settings » Local Policies » User Rights Assignment » User Rights In-Depth » Adjust memory quotas for a process

Adjust memory quotas for a process

Expand / Collapse
 
     

Adjust memory quotas for a process


Default assignment: Administrators

Microsoft documentation is conflicting about this privilege. While the name itself and Windows Server 2003 documentation indicates this right has to do with changing memory quotas, XP documentation and a number of discussion groups indicate this right actually has more to do with being able to change the CPU time a process gets.

Other research shows this right is required for what would seem unrelated actions such as starting a process under a different user account with CreateProcessAsUser() API. http://support.microsoft.com/kb/285879

In any case this is a right seldom needed by actual human users; it is sometimes needed by service/application accounts that start and manage other processes. For instance the IIS_WPG group which provides IIS worker processes with what they need to run, requires this right in order to run CGI processes.

Add Your Comments


Name: *
Email Address:
Web Address:
Verification Code:
*
 

Details
Article not rated yet.
Article has been viewed 2,772 times.
Options