Policy	Security Setting
Access Credential Manager as a trusted caller	
Access this computer from the network	Everyone,Administrators,Users,Backup Operators,Device Owners
Act as part of the operating system	
Add workstations to domain	
Adjust memory quotas for a process	LOCAL SERVICE,NETWORK SERVICE,SQLServerSQLAgentUser$USGR-RCHO-L10$SQLEXPRESS,Administrators,NT SERVICE\SQLAgent$SQLEXPRESS01,NT SERVICE\SQLAgent$JSRLOCALMSSQL,NT SERVICE\MSSQLLaunchpad$JSRLOCALMSSQL,NT SERVICE\SQLAgent$WINCCPLUSMIG2014,NT SERVICE\MSSQL$JSRLOCALMSSQL,NT SERVICE\MSSQL$SQLEXPRESS,NT SERVICE\MSSQL$WINCCPLUSMIG2014,NT SERVICE\MSSQL$SQLEXPRESS01,IIS APPPOOL\.NET v4.5,IIS APPPOOL\DefaultAppPool,IIS APPPOOL\.NET v4.5 Classic
Allow log on locally	__vmware__,Guest,Administrators,Users,Backup Operators,Device Owners
Allow log on through Remote Desktop Services	ConfigMgr Remote Control Users,Administrators,Remote Desktop Users
Back up files and directories	Administrators,Backup Operators
Bypass traverse checking	Everyone,LOCAL SERVICE,NETWORK SERVICE,SQLServerSQLAgentUser$USGR-RCHO-L10$SQLEXPRESS,Administrators,Users,Backup Operators,Device Owners,NT SERVICE\SQLAgent$SQLEXPRESS01,NT SERVICE\SQLAgent$JSRLOCALMSSQL,NT SERVICE\MSSQLLaunchpad$JSRLOCALMSSQL,NT SERVICE\SQLAgent$WINCCPLUSMIG2014,NT SERVICE\MSSQL$JSRLOCALMSSQL,NT SERVICE\MSSQL$SQLEXPRESS,NT SERVICE\MSSQL$WINCCPLUSMIG2014,NT SERVICE\MSSQL$SQLEXPRESS01
Change the system time	LOCAL SERVICE,Administrators,NT SERVICE\autotimesvc
Change the time zone	LOCAL SERVICE,Administrators,Users,Device Owners
Create a pagefile	Administrators
Create a token object	
Create global objects	LOCAL SERVICE,NETWORK SERVICE,Administrators,SERVICE
Create permanent shared objects	
Create symbolic links	Administrators,*S-1-5-83-0
Debug programs	Administrators
Deny access to this computer from the network	Guest
Deny log on as a batch job	
Deny log on as a service	
Deny log on locally	Guest
Deny log on through Remote Desktop Services	
Enable computer and user accounts to be trusted for delegation	
Force shutdown from a remote system	Administrators
Generate security audits	LOCAL SERVICE,NETWORK SERVICE,IIS APPPOOL\.NET v4.5,IIS APPPOOL\DefaultAppPool,IIS APPPOOL\.NET v4.5 Classic
Impersonate a client after authentication	LOCAL SERVICE,NETWORK SERVICE,Administrators,IIS_IUSRS,SERVICE
Increase a process working set	Users,Device Owners
Increase scheduling priority	Administrators,Window Manager\Window Manager Group
Load and unload device drivers	Administrators
Lock pages in memory	BPG\JRhoade
Log on as a batch job	Administrators,Backup Operators,Performance Log Users,IIS_IUSRS
Log on as a service	SYSTEM,NETWORK SERVICE,SQLServer2005SQLBrowserUser$USGR-RCHO-L10,SQLServerSQLAgentUser$USGR-RCHO-L10$SQLEXPRESS,NT SERVICE\ALL SERVICES,NT SERVICE\SQLAgent$SQLEXPRESS01,NT SERVICE\SQLAgent$JSRLOCALMSSQL,NT SERVICE\MSSQLLaunchpad$JSRLOCALMSSQL,NT SERVICE\SQLAgent$WINCCPLUSMIG2014,NT SERVICE\MSSQL$JSRLOCALMSSQL,NT SERVICE\autotimesvc,NT SERVICE\MSSQLFDLauncher$JSRLOCALMSSQL,NT SERVICE\SQLTELEMETRY$SQLEXPRESS01,NT SERVICE\MSSQL$SQLEXPRESS,NT SERVICE\SQLTELEMETRY$JSRLOCALMSSQL,NT SERVICE\MSSQL$WINCCPLUSMIG2014,NT SERVICE\MSSQL$SQLEXPRESS01,IIS APPPOOL\.NET v4.5,IIS APPPOOL\DefaultAppPool,IIS APPPOOL\.NET v4.5 Classic,*S-1-5-83-0
Manage auditing and security log	BPG\Domain Admins,BPG\SERVICE_Varonis,Administrators
Modify an object label	
Modify firmware environment values	Administrators
Obtain an impersonation token for another user in the same session	Administrators
Perform volume maintenance tasks	Administrators,NT SERVICE\MSSQL$JSRLOCALMSSQL,NT SERVICE\MSSQL$SQLEXPRESS01
Profile single process	Administrators
Profile system performance	Administrators,NT SERVICE\WdiServiceHost
Remove computer from docking station	Administrators,Users
Replace a process level token	LOCAL SERVICE,NETWORK SERVICE,SQLServerSQLAgentUser$USGR-RCHO-L10$SQLEXPRESS,NT SERVICE\SQLAgent$SQLEXPRESS01,NT SERVICE\SQLAgent$JSRLOCALMSSQL,NT SERVICE\MSSQLLaunchpad$JSRLOCALMSSQL,NT SERVICE\SQLAgent$WINCCPLUSMIG2014,NT SERVICE\MSSQL$JSRLOCALMSSQL,NT SERVICE\MSSQL$SQLEXPRESS,NT SERVICE\MSSQL$WINCCPLUSMIG2014,NT SERVICE\MSSQL$SQLEXPRESS01,IIS APPPOOL\.NET v4.5,IIS APPPOOL\DefaultAppPool,IIS APPPOOL\.NET v4.5 Classic
Restore files and directories	Administrators,Backup Operators
Shut down the system	Administrators,Users,Backup Operators
Synchronize directory service data	
Take ownership of files or other objects	Administrators