| Policy | Setting |
|---|
| Access this computer from the network | Everyone, BUILTIN\Administrators, NT AUTHORITY\Authenticated Users, NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS, BUILTIN\Pre-Windows 2000 Compatible Access |
| Act as part of the operating system | |
| Add workstations to domain | NT AUTHORITY\Authenticated Users |
| Adjust memory quotas for a process | NT AUTHORITY\LOCAL SERVICE, NT AUTHORITY\NETWORK SERVICE, BUILTIN\Administrators |
| Allow log on locally | BUILTIN\Administrators, BUILTIN\Backup Operators, BUILTIN\Account Operators, BUILTIN\Server Operators, BUILTIN\Print Operators |
| Back up files and directories | BUILTIN\Administrators, BUILTIN\Backup Operators, BUILTIN\Server Operators |
| Bypass traverse checking | Everyone, BUILTIN\Administrators, NT AUTHORITY\Authenticated Users, BUILTIN\Pre-Windows 2000 Compatible Access |
| Change the system time | NT AUTHORITY\LOCAL SERVICE, BUILTIN\Administrators, BUILTIN\Server Operators |
| Create a pagefile | BUILTIN\Administrators |
| Create a token object | |
| Create permanent shared objects | |
| Debug programs | BUILTIN\Administrators |
| Deny access to this computer from the network | DOMAIN\SUPPORT_388945a0 |
| Deny log on as a batch job | |
| Deny log on as a service | |
| Deny log on locally | DOMAIN\SUPPORT_388945a0 |
| Enable computer and user accounts to be trusted for delegation | BUILTIN\Administrators |
| Force shutdown from a remote system | BUILTIN\Administrators, BUILTIN\Server Operators |
| Generate security audits | NT AUTHORITY\LOCAL SERVICE, NT AUTHORITY\NETWORK SERVICE |
| Increase scheduling priority | BUILTIN\Administrators |
| Load and unload device drivers | BUILTIN\Administrators, BUILTIN\Print Operators |
| Lock pages in memory | |
| Log on as a batch job | NT AUTHORITY\LOCAL SERVICE, DOMAIN\SUPPORT_388945a0 |
| Log on as a service | DOMAIN\ADMINISTRATOr, NT AUTHORITY\NETWORK SERVICE |
| Manage auditing and security log | BUILTIN\Administrators |
| Modify firmware environment values | BUILTIN\Administrators |
| Profile single process | BUILTIN\Administrators |
| Profile system performance | BUILTIN\Administrators |
| Remove computer from docking station | BUILTIN\Administrators |
| Replace a process level token | NT AUTHORITY\LOCAL SERVICE, NT AUTHORITY\NETWORK SERVICE |
| Restore files and directories | BUILTIN\Administrators, BUILTIN\Backup Operators, BUILTIN\Server Operators |
| Shut down the system | BUILTIN\Administrators, BUILTIN\Backup Operators, BUILTIN\Server Operators, BUILTIN\Print Operators |
| Synchronize directory service data | |
| Take ownership of files or other objects | BUILTIN\Administrators |