Windows 10: Allow or Prevent Users and Groups to Create a Pagefile in Windows 10

How to: Allow or Prevent Users and Groups to Create a Pagefile in Windows 10

How to Allow or Prevent Users and Groups to Create a Pagefile in Windows 10


Paging is a memory management scheme by which a PC stores and retrieves data from secondary storage for use in main memory. In this scheme, the operating system retrieves data from secondary storage in same-size blocks called pages. Paging is an important part of virtual memory implementations in modern operating systems, using secondary storage to let programs exceed the size of available physical memory.

For simplicity, main memory is called "RAM" (abbreviated from "random-access memory") and secondary storage is called "disk" (a shorthand for "hard disk drive"), but the concepts do not depend on whether these terms apply literally to a specific computer system.

Virtual memory is a memory management technique that is implemented using both hardware and software. It maps memory addresses used by a program, called virtual addresses, into physical addresses in computer memory. Main storage as seen by a process or task appears as a contiguous address space or collection of contiguous segments. Windows manages virtual address spaces and the assignment of real memory to virtual memory. Address translation hardware in the CPU, often referred to as a memory management unit or MMU, automatically translates virtual addresses to physical addresses. Software within Windows may extend these capabilities to provide a virtual address space that can exceed the capacity of real memory and thus reference more memory than is physically present in the computer.

The primary benefits of virtual memory include freeing applications from having to manage a shared memory space, increased security due to memory isolation, and being able to conceptually use more memory than might be physically available, using the technique of paging.

Basically, a paging file is an area on the hard disk that Windows uses as if it were RAM when you run out of available RAM.

By default, only Administrators are allowed to create a pagefile.

See also: Create a pagefile - security policy setting (Windows 10) | Microsoft Docs

This tutorial will show you how to allow or prevent specific users and groups to create a pagefile in Windows 10.

*note You must be signed in as an administrator to allow or prevent users and groups to create a pagefile.


CONTENTS:

• Option One: Allow Users and Groups to Create a Pagefile in Local Security Policy
• Option Two: Prevent Users and Groups to Create a Pagefile in Local Security Policy
• Option Three: Allow or Prevent Users and Groups to Create a Pagefile in Command Prompt

OPTION ONE [/i] Allow Users and Groups to Create a Pagefile in Local Security Policy
*note Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Three below.
1. Press the Win+R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

2. Expand open Local Policies in the left pane of Local Security Policy, click/tap on User Rights Assignment, and double click/tap on the Create a pagefile policy in the right pane. (see screenshot below)



3. Click/tap on the Add User or Group button. (see screenshot below)



4. Click/tap on the Advanced button. (see screenshot below)



5. Click/tap on the Object Types button. (see screenshot below)



6. Check all the boxes for Object types, and click/tap on the OK. (see screenshot below)



7. Click/tap on the Find Now button, select the name of the user or group (ex: "Users") you want to add, and click/tap on OK. (see screenshots below)

*tip If you like, you can press and hold the Ctrl key to select more than one user and/or group.





8. Click/tap on OK. (see screenshot below)



9. Click/tap on OK. (see screenshot below)



10. When finished, you can close Local Users and Groups if you like.





OPTION TWO [/i] Prevent Users and Groups to Create a Pagefile in Local Security Policy
*note Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Three below.
1. Press the Win+R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

2. Expand open Local Policies in the left pane of Local Security Policy, click/tap on User Rights Assignment, and double click/tap on the Create a pagefile policy in the right pane. (see screenshot below)



3. Select the user or group (ex: "Users") you want to remove, and click/tap on the Remove button. (see screenshot below)

*tip If you like, you can press and hold the Ctrl key to select more than one user and/or group.



4. Click/tap on OK. (see screenshot below)



5. When finished, you can close Local Users and Groups if you like.





OPTION THREE [/i] Allow or Prevent Users and Groups to Create a Pagefile in Command Prompt
1. If you haven't already, you will need to do the following below before continuing on to step 2 below.
A) Download the ntrights.exe file below from the Windows Server 2003 Resource Kit Tools.
Download
B) Save the ntrights.zip file to your desktop, and unblock it.

C) Open the ntrights.zip file, copy or move the ntrights.exe file into your C:\Windows\System32 folder, and click/tap on Continue to approve.
2. Open an elevated command prompt.

3. Type the command you want below into the elevated command prompt, and press Enter.
(Add user or group to allow)
*Arrow ntrights +r SeCreatePagefilePrivilege -u "User or Group"

OR

(Remove user or group to prevent)
*Arrow ntrights -r SeCreatePagefilePrivilege -u "User or Group"

*note Substitute User or Group in the command above with the actual name of the user or group (ex: "Users") you want to add or remove for this policy.

*Warning Do not remove LOCAL SERVICE since this is used by Windows.

For example: ntrights +r SeCreatePagefilePrivilege -u "Users"
4. When finished, you can close the elevated command prompt if you like.

That's it,
Shawn


Related Tutorials

• How to Add or Remove Users from Groups in Windows 10
• How to Change User Rights Assignment Security Policy Settings in Windows 10
• How to Manage Virtual Memory Pagefile in Windows 10
• How to Clear Virtual Memory Pagefile at Shutdown in Windows 10
• How to Enable or Disable Virtual Memory Pagefile Encryption in Windows 10

:)

 

Clear Pagefile on Shutdown


I've been looking into clearing the pagefile, and I found the following steps at a somewhat dated webpage:

1. In the registry editor, navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
2. Set ClearPageFileAtShutdown to the REG_DWORD value of 1.
3. Restart Windows.

I'm just wondering whether those steps are still valid, and, if so, does clearing the pagefile work as advertised?

 

create user fails windows 10

Geoff,

This is a shot in the dark.

Several people have been reporting different problems logging in to newly created user accounts.

• They just get a user profile service failed message instead of your symptoms.
• Whilst their symptom is different, it occurs to me that the cause might be the same.
• The common factor is that it affects newly-created user accounts that have never been successfully logged into.

So, I suggest having a look at my explanations in Cannot create a new user account that can be login.

In short -

1 Try copying the NTUSER.DAT file from the [hidden] C:\Users\Default folder of a computer that does not exhibit the problem.

2 Try copying the whole [hidden] C:\Users\Default folder group from a computer that does not exhibit the problem.

3 Try recreating the [hidden] C:\Users\Default folder group using Kapil Arya's linked article.

I have nothing other than a gut feeling to justify suggesting these steps,

Best of luck,

Denis

 

Show Local users and Groups


Hello Frank, and welcome to Ten Forums.

If you have the Windows 10 Home edition, then it will not have Local Users and Groups (lusrmgr.msc) included in it. It's only available in the Pro and Enterprise editions instead.

If you like, you could use step 3 in OPTION THREE of the tutorial below list users in a group.

https://www.tenforums.com/tutorials/6...a.html#option4

 

Create contact group

Hi Suzy,

To narrow down your concern in creating a contact group, we would like to know the following:

• Are you getting any error messages in creating a contact group? If yes, what is the error?
• When did the issue first begin?
• What troubleshooting steps have you taken so far to resolve this?

We look forward to your response.

 

Windows 10 isnt creating memory dumps

It should still be doing a dump whether it's just from kernel space or kernel plus user space. It's possible the crashes your PC is experiencing are not allowing for a memory dump to be created. It's happened to me before when I've been pushing my overclock to far. Instead of the sad face BSOD I've gotten a hard lockup that prevented a memory dump.

This might be worth looking over.
Configure Windows 10 to Create Minidump on BSOD