Huawei N2000H V3 - Page 136

N2000H V3 Appliance
User Guide
5 System Security Policy
Issue 04 (2018-11-06)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies
Co., Ltd.
127
 Access this computer from the network: Administrators,NT
AUTHORITY\Authenticated Users
 Act as part of the operating system:
 Add workstations to domain: Administrators
 Adjust memory quotas for a process: Administrators,NT
AUTHORITY\LOCAL SERVICE,NT AUTHORITY\NETWORK SERVICE
 Allow logon locally: Administrators
 Allow logon through terminal services: Administrators
 Back up files and directories: Administrators
 Change the system time: Administrators,NT AUTHORITY\LOCAL SERVICE
 Change the time zone: Administrators,NT AUTHORITY\LOCAL SERVICE
 Create a pagefile: Administrators
 Create a token object:
 Create global objects: Administrators,NT AUTHORITY\SERVICE,NT
AUTHORITY\LOCAL SERVICE,NT AUTHORITY\NETWORK SERVICE
 Create permanent shared objects:
 Create symbolic links: Administrators
 Debug programs: Administrators
 Deny access to this computer from the network: Guests
 Deny logon as a batch job: Guests
 Deny logon as a service: Guests
 Deny logon locally: Guests
 Deny logon through Terminal Service: Guests
 Enable computer and user accounts to be trusted for delegation:
 Force shutdown from a remote system: Administrators
 Generate security audits: NT AUTHORITY\LOCAL SERVICE,NT
AUTHORITY\NETWORK SERVICE
 Impersonate a client after authentication: Administrators,NT
AUTHORITY\SERVICE,NT AUTHORITY\LOCAL SERVICE,NT
AUTHORITY\NETWORK SERVICE
 Increase scheduling priority: Administrators
 Load and unload device drivers: Administrators
 Lock pages in memory:
 Manage auditing and security log: Administrators
 Modify an object label:
 Modify firmware environment values: Administrators