WinSecWiki > Security Settings > Local Policies > User Rights > User Rights In-Depth > Adjust Memory Quotas
Adjust memory quotas for a process
Default assignment: Administrators
Microsoft documentation is conflicting about this privilege. While the name itself and Windows Server 2003 documentation indicates this right has to do with changing memory quotas, XP documentation and a number of discussion groups indicate this right actually has more to do with being able to change the CPU time a process gets.
Other research shows this right is required for what would seem unrelated actions such as starting a process under a different user account with CreateProcessAsUser() API. http://support.microsoft.com/kb/285879
In any case this is a right seldom needed by actual human users; it is sometimes needed by service/application accounts that start and manage other processes. For instance the IIS_WPG group which provides IIS worker processes with what they need to run, requires this right in order to run CGI processes.
Back to top