The Process Privileges protection scope enables the reduction of Windows privileges for restricted processes and applications.

You can disable following Windows privileges for the restricted processes and applications:
• Manage auditing and security logs
• Back up files and directories
• Restore files and directories
• Change system time
• Shut down system
• Force shutdown from a remote system
• Take ownership of files or other objects
• Debug programs
• Modify firmware environment values
• Profile system performance
• Profile single process
• Increase scheduling priority
• Load and unload device drivers
• Create a pagefile
• Adjust memory quotas for a process
• Bypass traverse checking
• Remove computer from docking station
• Perform volume maintenance tasks
• Impersonate a client after authentication
• Create global objects
Actions
| 1. | Choose Activity policy item in the context menu.
|

2. Switch to Common rules tab in the Application control policy window. Select the Process Privileges protection scope from the drop-down list.

3. Select a privilege in the list and uncheck the checkbox at the State column.
7. Click on OK or Apply button in the Common rules tab to save new rule and to update Application control policy.

|
|
|