1. and 2. are closely related. That is, if you manage to set 1., 2. disappears.
The "Create Global Objects" privilege is a standard Window privelege. The way you set it depends on whether it's a domain controller or not. In all cases, it's done from the "Administrative Tools" (typically "Local Security Policy" unless it's a DC).