Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
Determines which accounts can be used by processes to create a token that can then be used to get access to any local resources when the process uses NtCreateToken() or other token-creation APIs.
It is recommended that processes requiring this privilege use the LocalSystem account, which already includes this privilege, rather than using a separate user account with this privilege specially assigned.
Default: Local System.
For more information, see:
| • |