This setting is used by Credential Manager during Backup/Restore. No accounts should have this privilege, as it is only assigned ...