Test‐UserRightsAssignmentSeTrustedCredManAccessPrivilege

Test-UserRightsAssignmentSeTrustedCredManAccessPrivilege

SYNOPSIS

2.2.1 Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'

DESCRIPTION

This security setting is used by Credential Manager during Backup and Restore. No accounts should have this user right, as it is only assigned to Winlogon. Users' saved credentials might be compromised if this user right is assigned to other entities.

EXAMPLE

EXAMPLE 1

Test-UserRightsAssignmentSeTrustedCredManAccessPrivilege

Number    Name                                                                                                Source                    Pass    
--------- ------------------                                                                                  ------                    ----    
2.2.1     (L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'                      Group Policy Settings     True