Using Microsoft Intune for Local Administrator Password Management

Hello,

we experienced in our tests, that it is possible to enable Windows Hello for Business for the local admin accounts managed by Intune LAPS. This is a cool option in general, as handling is very convenient for the users then. The disadvantage, however, is that a Windows Hello login is still possible despite password rotation. This undermines the purpose of our use case, which is to grant users access to the local admin only when needed.

Here,  MZONDERLANDs suggestion for an additional option to enable or disable local admins via Intune Laps would be very helpful.

Best Regards,

Harald