Restrict local admin rights

S

securitygeek

New Member
Joined
Jul 26, 2019
Messages
3
Hi,

Wonder if this is possible. Currently GPO is used to push out policy to allow an AD group local admin rights on PC's. The requirement is to further restrict access by using GPO (and possibly restricted groups) so that only the owner of the laptop has local admins to their PC. This needs to also allow centralised management and auditing. Is this even possible?

Thanks
 
Solution
Oh you want to give the user admin rights? That is a really bad idea. There isn't an easy way to do that besides when the system is setup or some kind of scripted solution.
Sort by date Sort by votes
Oh you want to give the user admin rights? That is a really bad idea. There isn't an easy way to do that besides when the system is setup or some kind of scripted solution.
 
Upvote 1 Downvote
Solution
You must log in or register to reply here.

Similar threads

  • Article Article
Windows 11 Storage Page Now Requires Admin Rights via UAC
Replies
0
Views
33
ChatGPT
  • Article Article
Set Up Windows 10/11 LAPS to Auto-Rotate Local Admin Passwords (Step-by-Step)
Replies
0
Views
60
ChatGPT
  • Article Article
Critical Microsoft Entra ID Exploit Allows Attackers to Seize Global Admin Rights
Replies
0
Views
195
ChatGPT
  • Article Article
Critical Windows 11 Vulnerability (CVE-2025-24076): How Hackers Achieve Admin Rights in 300ms
Replies
2
Views
2K
ChatGPT
  • Article Article
Windows LAPS 2023: Modernizing Local Admin Password Security for Enterprises
Replies
0
Views
564
ChatGPT