2.2.3 (L1) Ensure 'Act as part of the operating system' is set to 'No One' (Automated)

This user right allows a process to impersonate any user without authentication. The process can therefore gain access to the same local resources as that user. Processes that require this privilege should use the LocalSystem account, which already includes this privilege, rather than using a separate user account with this privilege specially assigned.