Event banner
How to protect your administrator users on the device
Event Ended
Wednesday, Mar 05, 2025, 10:00 AM PSTEvent details
Administrator users on Windows have powerful capabilities to modify configuration and make system-wide changes which allow them to impact the overall security posture of Windows. Administrator protection is a new Windows 11 platform security feature that aims to protect the admin users on the device, while still allowing them to perform necessary functions.
Speaker: Nilanjana Ganguly
This session is part of Microsoft Technical Takeoff: Windows and Intune.
Heather_Poulsen
Updated Mar 12, 2025
13 Comments
Sort By
Comments have been turned off for this event
- Heather_Poulsen
Community Manager
Thanks for joining today’s session on “How to protect your administrator users on the device” at Microsoft Technical Takeoff. Q&A will remain open through Friday so keep your comments and questions coming! Up next: Delivering like-local Windows experiences from the cloud
Here are the resources we mentioned in today’s session:
- Admin experience: via Intune setting catalog LocalPoliciesSecurityOptions – Policy CSP
- Administrator protection on Windows 11 blog
- AlexandreI1340Copper Contributor
so WHB should be enabled for the Admin account (not for the Standard user itself)?
- Nilanjana Ganguly
Microsoft
Yes, WHB should be enabled for the admin account.
- AlexandreI1340Copper Contributor
it is not elevate a regular user to Admin? Admin account must exists with proper rights already? How is it integrated with LAPS?
- Nilanjana Ganguly
Microsoft
This is applicable for admin users on the device. Yes, Admin account must exist with proper rights already.
This feature is orthogonal to LAPS. No impact to LAPS when Administrator protection is enabled. - AbhijatSingh
Microsoft
Correct. It protects the Administrator user type. Its compatible with LAPS which protects your credentials
Been testing this, a great improvement!
- Heather_Poulsen
Community Manager
Thanks for the feedback, Erik!
- AlexandreI1340Copper Contributor
Insiders only?
- AbhijatSingh
Microsoft
Currently this feature is available in Windows Insiders canary channel but soon will be available in Windows insiders dev channel also.
- KaranS340Copper Contributor
Hi there,
Does this feature require a license to work, such as Entra ID P1/P2 or Intune P1/P2?Thanks.
- AbhijatSingh
Microsoft
No. This is core Windows platform security feature and need Windows license. Thanks
- Heather_Poulsen
Community Manager
Welcome to “How to protect your administrator users on the device” at Microsoft Technical Takeoff. Q&A is open now and throughout the week. Please post any questions or feedback here in the Comments.