Adjust memory quotas for a process (Windows)

Module: Account Integrity

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

This check reports accounts with rights to increase quotas. Processes running under accounts with this user right can increase the processor quota of other processes. Abuse of this right can aid a denial-ofservice attack. Use the name list to exclude or include users or security groups that are not already excluded or included by the Users to check option.

The following table lists the error message for the check.

Table: Error message for Adjust memory quotas for a process

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESM_INCREASE_QUOTAS

Category: Policy Compliance

  • Windows 2000 (105939)

  • Windows 2003 (205939)

  • Windows 2008 (248939)

  • Windows Vista (228935)

  • Windows XP (200935)

Title: Adjust memory quotas for a process

Description:The user or security group has the right to increase quotas. On Windows 2000 this is the "Increases quotas" right. Processes running under this account can increase the memory quota of other processes. Abuse of this right can deny services to others. If the right is authorized, edit the check's name list. If the right is not required, use the Correct feature to revoke the right.

Severity: yellow-1

Correctable: true

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]