0..1 false Gives the user the privilege to oval-def: adjust memory quotas for a EntityStateBoolType process. 0..1 false the user the privilege to oval-def: increase a process working EntityStateBoolType set. 0..1 false Gives the user the privilege to oval-def: load and unload device EntityStateBoolType drivers. oval-def: 0..1 false Gives the user the privilege to EntityStateBoolType lock pages in memory. oval-def: 0..1 false Gives the user the privilege to EntityStateBoolType add workstations to domain. 0..1 false Gives the user the privilege to oval-def: manage the files on a EntityStateBoolType volume. oval-def: 0..1 Gives the user the privilege to EntityStateBoolType profile a single process. oval-def: 0..1 false Gives the user the privilege to serelabelprivilege EntityStateBoolType modify an object label. 0..1 false the user the privilege to oval-def: force shutdown from a EntityStateBoolType remote system. 0..1 false Gives the user the privilege to restore files and directories. The following access rights are granted if this privilege is held: WRITE_DAC, oval-def: serestoreprivilege WRITE_OWNER, EntityStateBoolType ACCESS_SYSTEM_SECURITY, FILE_GENERIC_WRITE, FILE_ADD_FILE, FILE_ADD_SUBDIRECTORY, and DELETE. 0..1 Gives the user the privilege to oval-def: sesecurityprivilege manage auditing and security EntityStateBoolType log. oval-def: 0..1 false Gives the user the privilege to EntityStateBoolType shut down the system. 0..1 false Gives the user the privilege to synchronize directory service oval-def: data. This privilege enables EntityStateBoolType the holder to read all objects and properties in the directory, regardless of the
oval-def: EntityStateBoolType 0..1 false Gives the user the privilege to adjust memory quotas for a process. oval-def: EntityStateBoolType 0..1 false the user the privilege to increase a process working set. oval-def: EntityStateBoolType 0..1 false Gives the user the privilege to load and unload device drivers. oval-def: EntityStateBoolType 0..1 false Gives the user the privilege to lock pages in memory. oval-def: EntityStateBoolType 0..1 false Gives the user the privilege to add workstations to domain. oval-def: EntityStateBoolType 0..1 false Gives the user the privilege to manage the files on a volume. oval-def: EntityStateBoolType 0..1 Gives the user the privilege to profile a single process. serelabelprivilege oval-def: EntityStateBoolType 0..1 false Gives the user the privilege to modify an object label. oval-def: EntityStateBoolType 0..1 false the user the privilege to force shutdown from a remote system. serestoreprivilege oval-def: EntityStateBoolType 0..1 false Gives the user the privilege to restore files and directories. The following access rights are granted if this privilege is held: WRITE_DAC, WRITE_OWNER, ACCESS_SYSTEM_SECURITY, FILE_GENERIC_WRITE, FILE_ADD_FILE, FILE_ADD_SUBDIRECTORY, and DELETE. sesecurityprivilege oval-def: EntityStateBoolType 0..1 Gives the user the privilege to manage auditing and security log. oval-def: EntityStateBoolType 0..1 false Gives the user the privilege to shut down the system. oval-def: EntityStateBoolType 0..1 false Gives the user the privilege to synchronize directory service data. This privilege enables the holder to read all objects and properties in the directory, regardless of the
oval-windows-extension-specification_12-18-2014.docx