How to restrict admin rights on Windows 10 Azure AD/Office 365 joined machine?
Hi all, I just joined a new W10 Pro laptop to Azure AD by logging into the laptop with my Office 365 email address. It asked me to setup a pin for Windows 10 Hello. However I'm automatically an admin and I wanted to know how can I remove myself as an admin. I tried setting up a local account as admin and then logged in as that and removed my AzureAD user account from the "administrators" group in "local users and groups" but still have admin rights when I log in under my office 365 account. I also went into Windows 10 account settings and set my account type to standard (signed out and back in) and I can still install apps and open cmd as admin with no admin prompt. Anyone know how I can remove admin rights? Thanks Gerry
WMI unknown account in security permissions
Hi everyone, We are using WMI on Azure AD computers to give our NAC system (PortNox) access to read a certain process in the client. We have an issue where for some reason the account was mistakenly deleted and in this case when opening the WMI CIMV2 namespace security we see that an unknown account remained in the security permissions. When I try to use PowerShell to remove the unknown account I get unknown error. Anyone has any idea what I can do to get out of this mess? Thanks in advance, Rahamim.
