Create permanent shared objects
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
Determines which accounts can be used by processes to create a directory object in the Windows 2000 object manager.
This privilege is useful to kernel-mode components that plan to extend the Windows 20000 object name space. Because components running in kernel mode already have this privilege assigned to them, it is not necessary to specifically assign this privilege.
This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers.
By default, LocalSystem is the only account that has this right.