Event details
Do you manage Windows endpoints in Intune? Do you have questions that extend beyond configuration and involve ensuring security, compliance, and a seamless user experience on Windows? Join this Ask M...
Char_Cheesman
Updated Dec 27, 2024
Joe_Lurie
Microsoft
Mar 20, 2024RichR-VPS Have you tried the Endpoint security > Account protection blade to create a Local user group membership policy?
RichR-VPS
Mar 25, 2024Brass Contributor
Joe_Lurie Yes, after participating here I found some ways to do it yet it adds more problems than it solves for remote users or travelling users. They cannot do simple things like add a local printer. Apparently, no one prints to paper anymore or companies spend silly amounts of money on universal printing or 3rd party solutions for users who occasionally need a couple of pages printed or to use a scanner/MFP device at home, at the hotel, conference etc... Makes no sense. Yes installing drivers etc should require elevation etc no issue with that however, I should not have to make them open tickets with IT all the time to do what users perceive as simple 2 minute operations. The cost of them being idle and IT having to get involved is not worth the trouble.
added security of having admin removed from them is wonderful but practical implementation of it seems a ways off for us sadly.