Cisco TELEPRESENCE MANAGEMENT SUITE SECURE SERVER - CONFIGURATION GUIDE 13.0 Configuration Manual page 22

Policy
Act as part of the operating system
(SeTcbPrivilege)
Add workstations to domain
(SeMachineAccountPrivilege)
Adjust memory quotas for a process
(SeIncreaseQuotaPrivilege)
Allow logon locally
(SeInteractiveLogonRight)
Allow logon Through Terminal
Services
(SeRemoteInteractiveLogonRight)
Back up files and directories
(SeBackupPrivilege)
Bypass traverse checking
(SeChangeNotifyPrivilege)
Change the system time
(SeSystemTimePrivilege)
Create a pagefile
(SeCreatePagefilePrivilege)
Create a token object
(SeCreateTokenPrivilege)
Create global objects
(SeCreateGlobalPrivilege)
Create permanent shared objects
(SeCreatePermanentPrivilege)
Debug programs
(SeDebugPrivilege)
Deny access to this computer from
the network
(SeDenyNetworkLogonRight)
Deny logon as a batch job
(SeDenyBatchLogonRight)
Deny logon as a service
(SeDenyBatchLogonRight)
Deny logon locally
(SeDenyInteractiveLogonRight)
Deny log on Through Terminal
Services
(SeDenyRemoteInteractiveLogon
Right)
Enable computer and user accounts
to be trusted for delegation
(SeEnableDelegationPrivilege)
Force shutdown from a remote
system
(SeRemoteShutdownPrivilege)
Cisco TMS Secure Server Configuration Guide 13.0
Security Setting
Administrators, LOCAL SERVICE, NETWORK SERVICE,
IWAM_<machinename>,
SQLServer2005MSSQLUser$ComputerName$InstanceName
Administrators
Administrators
Administrators
Administrators, Authenticated Users,
SQLServer2005MSSQLUser$ComputerName$InstanceName
Administrators
Administrators
Administrators, SERVICE
Support_388945a0, ANONYMOUS LOGON,
SUPPORT_388945a0
Guests, SUPPORT_388945a0, ASPNET, tmsserviceuser,
sqlserviceuser
Guests, SUPPORT_388945a0, ASPNET, tmsserviceuser,
sqlserviceuser
Administrators
Securing Windows Server 2003 tasks
Page 22 of 34