| Policy | Setting |
| Access this computer from the network | Pre-Windows 2000 Compatible Access, Everyone, NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS, NT AUTHORITY\Authenticated Users, BUILTIN\Administrators |
| Add workstations to domain | NT AUTHORITY\Authenticated Users |
| Adjust memory quotas for a process | NT AUTHORITY\NETWORK SERVICE, NT AUTHORITY\LOCAL SERVICE, BUILTIN\Administrators |
| Allow log on locally | Server Operators, BUILTIN\Print Operators, NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS, BUILTIN\Backup Operators, BUILTIN\Administrators, Account Operators |
| Back up files and directories | Server Operators, BUILTIN\Backup Operators, BUILTIN\Administrators |
| Bypass traverse checking | Pre-Windows 2000 Compatible Access, NT AUTHORITY\NETWORK SERVICE, NT AUTHORITY\LOCAL SERVICE, Everyone, NT AUTHORITY\Authenticated Users, BUILTIN\Administrators |
| Change the system time | Server Operators, NT AUTHORITY\LOCAL SERVICE, BUILTIN\Administrators |
| Create a pagefile | BUILTIN\Administrators |
| Debug programs | BUILTIN\Administrators |
| Enable computer and user accounts to be trusted for delegation | BUILTIN\Administrators |
| Force shutdown from a remote system | Server Operators, BUILTIN\Administrators |
| Generate security audits | NT AUTHORITY\NETWORK SERVICE, NT AUTHORITY\LOCAL SERVICE |
| Increase scheduling priority | Window Manager\Window Manager Group, BUILTIN\Administrators |
| Load and unload device drivers | BUILTIN\Print Operators, BUILTIN\Administrators |
| Log on as a batch job | BUILTIN\Performance Log Users, BUILTIN\Backup Operators, BUILTIN\Administrators |
| Manage auditing and security log | BUILTIN\Administrators |
| Modify firmware environment values | BUILTIN\Administrators |
| Profile single process | BUILTIN\Administrators |
| Profile system performance | NT SERVICE\WdiServiceHost, BUILTIN\Administrators |
| Remove computer from docking station | BUILTIN\Administrators |
| Replace a process level token | NT AUTHORITY\NETWORK SERVICE, NT AUTHORITY\LOCAL SERVICE |
| Restore files and directories | Server Operators, BUILTIN\Backup Operators, BUILTIN\Administrators |
| Shut down the system | Server Operators, BUILTIN\Print Operators, BUILTIN\Backup Operators, BUILTIN\Administrators |
| Take ownership of files or other objects | BUILTIN\Administrators |