Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Unauthorized accounts must not have the Replace a process level token user right.
Description
Discussion Text
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities.
The "Replace a process level token" user right allows one process or service to start another process or service with a different security access token. A user with this right could use this to impersonate another account.
The "Replace a process level token" user right allows one process or service to start another process or service with a different security access token. A user with this right could use this to impersonate another account.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.