GPO for Admin rights Windows 10 Pro?

%3CLINGO-SUB%20id%3D%22lingo-sub-104614%22%20slang%3D%22en-US%22%3EGPO%20for%20Admin%20rights%20Windows%2010%20Pro%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-104614%22%20slang%3D%22en-US%22%3E%3CP%3EA%20customer%20has%20a%20set%20of%20users%20that%20require%20local%20admin%20rights%20on%20their%20Windows%2010%20Pro%20device.%26nbsp%3B%20Is%20there%20a%20GPO%20that%20can%20be%20applied%20to%20those%20users%20to%20enable%20local%20admin%20rights%20for%20his%2Fher%20PC%3F%26nbsp%3B%20They%20have%20a%20GPO%20from%20Windows%207%20that%20worked%2C%20but%20it's%20not%20working%20in%20Windows%2010.%20%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-107818%22%20slang%3D%22en-US%22%3ERe%3A%20GPO%20for%20Admin%20rights%20Windows%2010%20Pro%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-107818%22%20slang%3D%22en-US%22%3E%3CP%3EChris%20-%20Is%20Windows%2010%20device%20in%20domain%20or%20Workgroup%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EUser%20Account%20Control%20Group%20Policy%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3EUser%20Account%20Control%3A%20Admin%20Approval%20Mode%20for%20the%20built-in%20Administrator%20account.%3C%2FP%3E%3CP%3EThe%20User%20Account%20Control%3A%20Admin%20Approval%20Mode%20for%20the%20built-in%20Administrator%20account%20policy%20setting%20controls%20the%20behavior%20of%20Admin%20Approval%20Mode%20for%20the%20built-in%20Administrator%20account.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CUL%3E%3CLI%3EEnabled.%20The%20built-in%20Administrator%20account%20uses%20Admin%20Approval%20Mode.%20By%20default%2C%20any%20operation%20that%20requires%20elevation%20of%20privilege%20will%20prompt%20the%20user%20to%20approve%20the%20operation.%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CUL%3E%3CLI%3EDisabled.%20(Default)%20The%20built-in%20Administrator%20account%20runs%20all%20applications%20with%20full%20administrative%20privilege.%3C%2FLI%3E%3C%2FUL%3E%3CP%3Efollowing%20link's%20can%20help%20you%20out.%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Faccess-protection%2Fuser-account-control%2Fuser-account-control-group-policy-and-registry-key-settings%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EUser%20Account%20Control%20Group%20Policy%20%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22http%3A%2F%2Fwww.thewindowsclub.com%2Felevated-privileges-windows%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EGrant%20or%20get%20Elevated%20Privileges%20in%20Windows%2010%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22http%3A%2F%2Fwww.thewindowsclub.com%2Fchange-user-account-settings-windows-8%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EChange%20User%20Account%20Control%20settings%20in%20Windows%2010%2F8%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3EGowrish%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-107249%22%20slang%3D%22en-US%22%3ERe%3A%20GPO%20for%20Admin%20rights%20Windows%2010%20Pro%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-107249%22%20slang%3D%22en-US%22%3E%3CP%3ENo%20there%20is%20not%20and%20giving%20admin%20rights%20is%20not%20a%20good%20practice.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

A customer has a set of users that require local admin rights on their Windows 10 Pro device.  Is there a GPO that can be applied to those users to enable local admin rights for his/her PC?  They have a GPO from Windows 7 that worked, but it's not working in Windows 10.  

2 Replies

No there is not and giving admin rights is not a good practice.

Chris - Is Windows 10 device in domain or Workgroup? 

 

User Account Control Group Policy 

User Account Control: Admin Approval Mode for the built-in Administrator account.

The User Account Control: Admin Approval Mode for the built-in Administrator account policy setting controls the behavior of Admin Approval Mode for the built-in Administrator account.

 

  • Enabled. The built-in Administrator account uses Admin Approval Mode. By default, any operation that requires elevation of privilege will prompt the user to approve the operation.

 

  • Disabled. (Default) The built-in Administrator account runs all applications with full administrative privilege.

following link's can help you out. 

User Account Control Group Policy

Grant or get Elevated Privileges in Windows 10

Change User Account Control settings in Windows 10/8

 

Thanks

Gowrish