2.2.36 (L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE' (Auto
2.2.36 (L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE' (Automated)
This security setting determines which user accounts can call the CreateProcessAsUser() application programming interface (API) so that one service can start another. An example of a process that uses this user right is Task Scheduler. For information about Task Scheduler, see Task Scheduler overview.
./Device/Vendor/MSFT/Policy/Config/UserRights/ReplaceProcessLevelToken
Format: chr (string)
Value: LOCAL SERVICE, NETWORK SERVICE
YES
User Rights
Replace Process Level Token (Windows Insiders only)
Previous2.2.35 (L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHosNext2.2.37 (L1) Ensure 'Restore files and directories' is set to 'Administrators' (Automated)
Last updated