Forum Discussion
Windows 365 Business Cloud PC Local Admin
Hello,
I have deployed Windows 365 Business and thus far it is working great. However, I was wondering if each user is required to have local admin privilege's? Thanks!
8 Replies
- I have also asked myself this question. from a security point of view whether something can be changed. I simply created a new user in the computer administration and added this user to the administrators group. Then I took out my AD user. Afterwards you are always asked for increased rights in the UAC for installers and can enter the local admin. With this I think you have increased the security a bit.
If someone has a different opinion or would like to share some additional security advice with us, I would be very grateful.
Regards Sebastian- EricOrman
Microsoft
We are currently investigating capability to provisioning Business Cloud PC's without requiring users to be local admins, they would be standard users. There is problems with this because without MEM there will not be a way to perform elevated administration on these devices. More details to come as we continue our development/progress.- EricOrman, is there an update to this? From a compliance point of view, a standard user cannot have local admin rights to the Win365 provisioned instance. We do not want users installing software. Or, is there a workaround to strip it later?
- EricOrmanYes, all users are local admins in the Business option currently of Windows 365, see the second paragraph here = https://docs.microsoft.com/en-us/microsoft-365/admin/setup/get-started-windows-365-business?view=o365-worldwide#installing-apps
