Event banner
Uplevel security with Endpoint Privilege Management + Windows LAPS
Event Ended
Tuesday, Nov 28, 2023, 07:00 AM PSTEvent details
It's simple. Running devices as standard user can help lower your attack surface. Let's talk about the threats we face today, the keys to implementing "just enough" access for your users with Microso...
Char_Cheesman
Updated Dec 27, 2024
jeddy_
Nov 28, 2023Iron Contributor
How can EPM be leveraged to allow certain tasks/settings changes inside of Windows itself that are normally restricted for non-admin users (i.e. allowing certain users to change network/IP address settings, allowing all users to edit the Public Desktop, etc.)?
Terry_Rutter
Nov 28, 2023Copper Contributor
With Windows 10 there were several "workarounds", but those are not working in Windows 11. For instance, In Win 10 a non-admin could change the IP address of a device by going through Settings but could not change it via Control Panel. Conversely a non-Admin could change their Time Zone through Control Panel but not through Settings or the Task Bar. We're having to use the Network Configuration Operators group for IP address changes, which makes things messy as in many cases the user gets over-provisioned.
Matt, add me as a user who needs some of these permissions to allow non-Admins to perform some tasks.