Increase a process working setID: oval:org.secpod.oval:def:36533 | Date: (C)2016-08-05 (M)2023-07-14 |
Class: COMPLIANCE | Family: windows |
This privilege determines which user accounts can increase or decrease the size of a process's working set.
Default: Users
The working set of a process is the set of memory pages currently visible to the process in physical RAM memory. These pages are resident and available for an application to use without triggering a page fault. The minimum and maximum working set sizes affect the virtual memory paging behavior of a process.
Warning: Increasing the working set size for a process decreases the amount of physical memory available to the rest of the system.
Counter Measure:
Certain environments can help mitigate this risk by limiting which users can increase the process working set.
Potential Impact:
Users will be unable to increase the working set for their processes, which could degrade performance.
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Increase a process working set
(2) REG: ###
(3) WMI: root\rsop\computer#RSOP_UserPrivilegeRight#AccountList#UserRight='SeIncreaseWorkingSetPrivilege' and precedence=1
Platform: |
Microsoft Windows 10 |