WinSecWiki > Security Settings > Local Policies > User Rights > User Rights In-Depth > Volume maintenance

Perform volume maintenance tasks

AKA: SeManageVolumePrivilege, Perform volume maintenance tasks

Default assignment: Administrators

Microsoft documentation indicates “non-administrative or remote users” require this right to perform volume maintenance tasks such as defragmenting, Disk Cleanup and creating or deleting volumes. This suggests Administrators logged on interactively do not need this right.

This is a sensitive right since it could result in denial of service, loss of data, performance problems or even disclosure of sensitive data by accessing areas of the disk that contain confidential but un-erased data.

Back to top


Additional Resources