WinSecWiki > Security Settings > Local Policies > User Rights > User Rights In-Depth > Adjust Memory Quotas

Adjust memory quotas for a process

Default assignment: Administrators

Microsoft documentation is conflicting about this privilege. While the name itself and Windows Server 2003 documentation indicates this right has to do with changing memory quotas, XP documentation and a number of discussion groups indicate this right actually has more to do with being able to change the CPU time a process gets.

Other research shows this right is required for what would seem unrelated actions such as starting a process under a different user account with CreateProcessAsUser() API.

In any case this is a right seldom needed by actual human users; it is sometimes needed by service/application accounts that start and manage other processes. For instance the IIS_WPG group which provides IIS worker processes with what they need to run, requires this right in order to run CGI processes.

Back to top


Additional Resources