WinSecWiki > Security Settings > Local Policies > User Rights > User Rights In-Depth > Volume maintenance
Perform volume maintenance tasks
AKA: SeManageVolumePrivilege, Perform volume maintenance tasks
Default assignment: Administrators
Microsoft documentation indicates “non-administrative or remote users” require this right to perform volume maintenance tasks such as defragmenting, Disk Cleanup and creating or deleting volumes. This suggests Administrators logged on interactively do not need this right.
This is a sensitive right since it could result in denial of service, loss of data, performance problems or even disclosure of sensitive data by accessing areas of the disk that contain confidential but un-erased data.
Back to top