Local admin/privilege management with Intune

Blog post: oceanleaf.ch/local-admin-priv...
@NiklasTinner: / niklastinner
Azure AD Object ID To SID Converter: erikengberg.com/azure-ad-obje...
Chapters
00:00 Intro
01:44 Azure AD roles
02:14 Intune account protection policy
03:53 Endpoint Privilege Management (EPM)
06:29 Windows LAPS
by oceanleaf.ch/

[@ricklucas6216]

This was a really good video! Straight to the point and clear. You got a subscriber!

[@cuneytkorkmaz8460]

Hey Niklas, thanks for the explanation, we just enabled EPM plug-in and will test in next month

[@iliketomoveit5999]

Hi! I'm trying to implement Intune but every user I create has admin rights even though they're created as standard user via O365. Any guide on how to fix that? thanks!

[@oceanleafnt]

Verify in the deployment profile, that the user account type is not set to administrator. Also check the mentioned methods from the video.

[@Danissimode]

Devices need to be entered into the organization using the m365 administrator account. If you create through a regular m365 account, this subsequent users of this device will have device administrator rights without being a member of the local administrators group.