How does local admin worked in a multi-session VM?

%3CLINGO-SUB%20id%3D%22lingo-sub-1132218%22%20slang%3D%22en-US%22%3EHow%20does%20local%20admin%20worked%20in%20a%20multi-session%20VM%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1132218%22%20slang%3D%22en-US%22%3EIf%20I%20deploy%20a%20multi%20session%20VM%20for%20users%20and%20one%20of%20the%20users%20needs%20to%20be%20a%20local%20Admin%2C%20does%20that%20give%20them%20admin%20access%20to%20anything%20beyond%20their%20own%20session%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1133575%22%20slang%3D%22en-US%22%3ERe%3A%20How%20does%20local%20admin%20worked%20in%20a%20multi-session%20VM%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1133575%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F84477%22%20target%3D%22_blank%22%3E%40John%20Quile%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYes%2C%20if%20they%20are%20added%20to%20the%20local%20administrators%20group%20this%20will%20give%20them%20full%20access%20to%20the%20machine.%26nbsp%3B%20This%20is%20a%20bad%20idea%20for%20a%20multi%20user%20scenario%2C%20especially%20if%20only%20one%20user%20needs%20admin%20access.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20make%20a%20persistent%20desktop%20for%20that%20user%20(with%20D2%2F3%20SKU)%20that%20where%20they%20can%20be%20an%20admin.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor
If I deploy a multi session VM for users and one of the users needs to be a local Admin, does that give them admin access to anything beyond their own session?
1 Reply

@John Quile 

 

Yes, if they are added to the local administrators group this will give them full access to the machine.  This is a bad idea for a multi user scenario, especially if only one user needs admin access.

 

You can make a persistent desktop for that user (with D2/3 SKU) that where they can be an admin.