Home

Configure Windows 10 device first user admin others guest

%3CLINGO-SUB%20id%3D%22lingo-sub-964191%22%20slang%3D%22en-US%22%3EConfigure%20Windows%2010%20device%20first%20user%20admin%20others%20guest%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-964191%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20it%20possible%20to%20roll%20out%20a%20windows%2010%20with%20autopilot%20where%20the%20user%20who%20enrolls%20the%20device%20and%20other%20users%20are%20guests%20with%20very%20limited%20permissions%20or%20even%20block%20users%20from%20logging%20on%20devices%20which%20they%20didn't%20enroll.%20We%20have%20users%20who%20forget%20to%20bring%20there%20laptop%20and%20then%20take%20a%20laptop%20of%20another%20user%20who%20left%20there%20device%20at%20the%20office.%20We%20looking%20at%20a%20way%20force%20users%20only%20to%20use%20there%20own%20device.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-964191%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eblock%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-964924%22%20slang%3D%22en-US%22%3ERe%3A%20Configure%20Windows%2010%20device%20first%20user%20admin%20others%20guest%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-964924%22%20slang%3D%22en-US%22%3EThere%20is%20no%20built-in%20way%20in%20Intune%20at%20the%20moment.%3CBR%20%2F%3EThere%20are%20some%20local%20policies%20that%20you%20can%20configure%20to%20allow%20only%20one%20user%20to%20login%20(%3CA%20href%3D%22https%3A%2F%2Fcommunity.spiceworks.com%2Ftopic%2F35184-only-allow-one-user-account-to-access-a-workstation%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fcommunity.spiceworks.com%2Ftopic%2F35184-only-allow-one-user-account-to-access-a-workstation%3C%2FA%3E).%20But%20that%20would%20require%20you%20writing%20a%20custom%20Powershell%20script.%20Where%20you%20set%20the%20allow%20group%20to%20yourself%20and%20the%20currently%20logged-on%20user.%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Is it possible to roll out a windows 10 with autopilot where the user who enrolls the device and other users are guests with very limited permissions or even block users from logging on devices which they didn't enroll. We have users who forget to bring there laptop and then take a laptop of another user who left there device at the office. We looking at a way force users only to use there own device.

1 Reply
Highlighted
There is no built-in way in Intune at the moment.
There are some local policies that you can configure to allow only one user to login (https://community.spiceworks.com/topic/35184-only-allow-one-user-account-to-access-a-workstation). But that would require you writing a custom Powershell script. Where you set the allow group to yourself and the currently logged-on user.