| Act as System Privilege |
Inappropriate user with Act as Part of the Operating System privilege |
| Backup Privilege |
Inappropriate user with Backup Files and Directories privilege |
| Change System Time Privilege |
Inappropriate user with Change the System Time privilege |
| Create Pagefile Privilege |
Inappropriate user with Create a Pagefile privilege |
| Create Permanent Object Privilege |
Inappropriate user with Create Permanent Shared Objects privilege |
| Create Token Name Privilege |
Inappropriate user with Create a Token Object privilege |
| Debug Privilege |
Inappropriate user with Debug Programs privilege |
| Disabled Account |
Disabled account |
| Domain Admin |
Domain Administrators group includes non-default user |
| Domain Guest |
Domain Guest group includes non-default user |
| Dormant Account |
Dormant account |
| Forced Logoff |
Forced logoff not enabled for account with expired time |
| Generate Security Audit Privilege |
Inappropriate user with Generate Security Audits privilege |
| Guest Exists |
Guest account name exists |
| Guest User |
Guest account includes unallowed user |
| Guest in Group |
Guest account in non-default group |
| Increase Priority Privilege |
Inappropriate user with Increase Scheduling Priority privilege |
| Increase Quota Privilege |
Inappropriate user with Increase Quotas privilege |
| Interactive Guest Logon |
Windows NT Interactive_Guest_Logon |
| Load Driver Privilege |
Inappropriate user with Load and Unload Device Drivers privilege |
| Local User |
Windows NT local user on workstation |
| Lock Memory Privilege |
Inappropriate user with Lock Pages in Memory privilege |
| Locked Account |
Locked account from bad login attempts |
| Manage Security Log Privilege |
Inappropriate user with Manage Auditing and Security Log privilege |
| Network Guest Logon |
Windows NT network Guest logon |
| No Logon |
Windows NT user has never logged on |
| No User Profile |
No user profile required |
| Profile Single Process Privilege |
Inappropriate user with Profile Single Process privilege |
| Profile System Privilege |
Inappropriate user with Profile System Performance privilege |
| Remote Shutdown Privilege |
Inappropriate user with Force Shutdown from a Remote System privilege |
| Replace Process Token Privilege |
Inappropriate user with Replace a Process Level Token privilege |
| Restore Privilege |
Inappropriate user with Restore Files and Directories privilege |
| System Environment Privilege |
Inappropriate user with Modify Firmware Environment Values privilege |
| Take Ownership Privilege |
Inappropriate user with Take Ownership of Files or Other Objects privilege |
| Workstation not restricted |
Windows NT workstations not restricted |