Modify firmware environment variables

Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment

Description

Allows a user to modify system-wide environment variables.

This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers.

By default, only administrators and LocalSystem accounts have the privilege to modify firmware environment variables.