Forum Discussion
Restrict user account
Dear all, Can I check with you guys, when we use the user account to enrol a new laptop/desktop, the system will auto put the user account into the 'Administrator group' Thus, the user will get t...
Hi,
I'll suggest to use Autopilot to enroll new devices, in which you can define a profile that will make the enrolling user a standard user and not an admin.
for existing devices you can create a Policy CSP - LocalUsersAndGroups in Intune to modify the members on the local administrators group (Starting from Windows 10, version 20H2)
https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups
hope this helps.
I'll suggest to use Autopilot to enroll new devices, in which you can define a profile that will make the enrolling user a standard user and not an admin.
for existing devices you can create a Policy CSP - LocalUsersAndGroups in Intune to modify the members on the local administrators group (Starting from Windows 10, version 20H2)
https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups
hope this helps.
Thank you for your kind suggestion. I will try later. Thanks!
