Event details
13 Comments
- Heather_Poulsen
Community Manager
Thanks for joining today’s session on “How to protect your administrator users on the device” at Microsoft Technical Takeoff. Q&A will remain open through Friday so keep your comments and questions coming! Up next: Delivering like-local Windows experiences from the cloud
Here are the resources we mentioned in today’s session:
- Admin experience: via Intune setting catalog LocalPoliciesSecurityOptions – Policy CSP
- Administrator protection on Windows 11 blog
so WHB should be enabled for the Admin account (not for the Standard user itself)?
Nilanjana GangulyMicrosoft
Yes, WHB should be enabled for the admin account.
it is not elevate a regular user to Admin? Admin account must exists with proper rights already? How is it integrated with LAPS?
- Nilanjana Ganguly
This is applicable for admin users on the device. Yes, Admin account must exist with proper rights already.
This feature is orthogonal to LAPS. No impact to LAPS when Administrator protection is enabled. - AbhijatSingh
Correct. It protects the Administrator user type. Its compatible with LAPS which protects your credentials
Been testing this, a great improvement!
- Heather_Poulsen
Thanks for the feedback, Erik!
Insiders only?
- AbhijatSingh
Currently this feature is available in Windows Insiders canary channel but soon will be available in Windows insiders dev channel also.
Hi there,
Does this feature require a license to work, such as Entra ID P1/P2 or Intune P1/P2?Thanks.
- AbhijatSingh
No. This is core Windows platform security feature and need Windows license. Thanks
- Heather_Poulsen
Welcome to “How to protect your administrator users on the device” at Microsoft Technical Takeoff. Q&A is open now and throughout the week. Please post any questions or feedback here in the Comments.
