WinSecWiki > Security Settings > Local Policies > User Rights > User Rights In-Depth > Create global objects
Create global objects
AKA: SeCreateGlobalPrivilege, Create global objects
Default assignment: Administrators, SERVICE
A process requires this right in order to create sections and/or symbolic link objects in the directories of Object Manager. This right is required for users running inside a Terminal Services session in order to create an object in the system global name space. This right was apparently added to prevent poorly written applications from creating objects like semaphores and named pipes that conflict with each other in the global name space for the system.
This right should normally be left at its default settings. If you run into memory or other errors running applications under Terminal Services, this right may be the cause. See http://support.microsoft.com/kb/821546
This right first appeared in Windows 2003 and SP4 for Windows 2000.
Back to top