Windows Admin Center Built-in Administrators

%3CLINGO-SUB%20id%3D%22lingo-sub-1403010%22%20slang%3D%22en-US%22%3EWindows%20Admin%20Center%20Built-in%20Administrators%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1403010%22%20slang%3D%22en-US%22%3E%3CP%3EWindows%20Admin%20Center%201910.2%20and%20before%20insists%3CSPAN%3E%26nbsp%3Bon%20using%20Built%20In%20Administrators%20as%20Gateway%20Admins.%26nbsp%3B%20This%20is%20horrible%20in%20a%20domain%20situation.%26nbsp%3B%20The%20group%20will%20likely%20include%20Domain%20Admins%20at%20a%20minimum.%26nbsp%3B%20Many%2C%20if%20not%20all%20of%20these%20don't%20need%20to%20be%20gateway%20admins.%26nbsp%3B%20I%20get%20that%20its%20a%20great%20starting%20posture%20but%20fails%20shortly%20later.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThoughts.%26nbsp%3B%3C%2FP%3E%3COL%3E%3CLI%3EIs%20there%20a%20method%20that%20is%20not%20advertised%20for%20this%3F%3C%2FLI%3E%3CLI%3ECan%20this%20be%20disabled%20if%20anther%20security%20group%20is%20in%20place%3F%26nbsp%3B%3C%2FLI%3E%3CLI%3ECan%20Registry%20be%20leveraged%20to%20turn%20this%20off%3F%26nbsp%3B%26nbsp%3B%3C%2FLI%3E%3C%2FOL%3E%3CP%3EI%20love%20WAC%20but%20this%20issue%20leaves%20me%20in%20a%20tough%20place%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1403010%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EWAC%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Admin%20Center%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
New Contributor

Windows Admin Center 1910.2 and before insists on using Built In Administrators as Gateway Admins.  This is horrible in a domain situation.  The group will likely include Domain Admins at a minimum.  Many, if not all of these don't need to be gateway admins.  I get that its a great starting posture but fails shortly later. 

 

Thoughts. 

  1. Is there a method that is not advertised for this?
  2. Can this be disabled if anther security group is in place? 
  3. Can Registry be leveraged to turn this off?  

I love WAC but this issue leaves me in a tough place

0 Replies