User Rights - Increase Scheduling Priority

[danb-au]

The User Rights policy Increase Scheduling Priority fails to add *S-1-5-90 for Window Manager Group and causes event log errors. "MDM PolicyManager: Merge string, Area: (UserRights), Policy: (IncreaseSchedulingPriority), EnrollmentID requesting merge: (1e05dd5d-a022-46c5-963c-b20de341170f), Result:(0x8000FFFF) Catastrophic failure."

Adjusting it to *S-1-5-90-0 seems to fix the issue, and the group will add correctly. This is in Windows 11 23H2, haven't tested on other versions.

[SkipToTheEndpoint]

Hi @danb-au

I've just validated that on both 23H2 and 24H2 I get the same error in the MDM Event Log.

Running this setting by the CIS benchmark, it seems like it should indeed include the trailing -0, after which the policy merges correctly.

Marking this as a bug and I'll see if it's better to put out a fix to this one issue or park it until the next OIB version. I'm leaning to the latter as this is just enforcing defaults to match CIS, and MS don't even include this one in their baseline.

Thanks!