Maester 
MP.JL.CISW11INT.L1.253 Replace Process Level Token is set to *S-1-5-19, *S-1-5-20
Description
CIS Microsoft Intune for Windows 11 Benchmark, recommendation 90.32 (Level 1).
The test passes when an assigned settings catalog policy for Windows sets User Rights > Replace Process Level Token to a value that is in *S-1-5-19, *S-1-5-20, and no other assigned policy sets it to something else.
Remediation action
- In the Microsoft Intune admin center, go to Devices > Configuration and open (or create) a settings catalog policy for Windows 10 and later.
- Add User Rights > Replace Process Level Token and set it to a value that is
in*S-1-5-19, *S-1-5-20. - Assign the policy to your Windows devices, and remove any other assigned policy that sets it to something else.
Related links
%TestResult%