1c1f7740-6b87-4791-ad84-f7ec6d25c3f0
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities.
Accounts with the "Take ownership of files or other objects" user right can take ownership of objects and make changes.
To fix this configure the policy value for
Computer Configuration
|_ Windows Settings
|_ Security Settings
|_ Local Policies
|_ User Rights Assignment
|_ Take ownership of files or other objects to include only the following accounts or groups:
- Administrators
STIG: Server
2025: https://system32.eventsentry.com/stig/viewer/V-278261
2022: https://system32.eventsentry.com/stig/viewer/V-254512
2019: https://system32.eventsentry.com/stig/viewer/V-205768
2016: https://system32.eventsentry.com/stig/viewer/V-225092
Desktop
W11: https://system32.eventsentry.com/stig/viewer/V-253506
W10: https://system32.eventsentry.com/stig/viewer/V-220983
NIST 800-53 : AC-3, AC-6, CM-6, SI-7
NIST 800-171: 3.1.1, 3.1.2, 3.4.6
CMMC v2.0 L2: AC.L2-3.1.1, AC.L2-3.1.2, CM.L2-3.4.6
PCI-DSS v4.0: 2.2.1, 7.2.1
HIPAA SR : §164.312(a)(1), §164.312(c)(1)
HIPAA HICP : Practice 3 (Identity and Access Management), Practice 4 (Data Protection)
Manage your cookie preferences below:
To learn more about our use of cookies, please see our
Privacy Policy.