Forum Discussion
Incorrect Identification of Local Admin in Defender for Endpoint
Hello everyone, I am facing an issue with Microsoft Defender for Endpoint where a user is incorrectly identified as having local admin rights. In the Devices menu of the workstation in Defender, the...
Hi,
thanks for your comment.
Here are some screenshots:
In the Security device page, in red is the standard user account where local admin is seen.
In Advanced hunting :
And this is on the device :
Obviously, this is not a local user or in a domain group.