This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 7.000000000000001%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
Hi Folks
In the Intune environment there are some devices , the end-user having admin privileges. which need to remove the admin privileges. May i know how to check how many devices having admin privileges and how to remove the admin privileges on the windows machines.
There are multiple ways to address this, but if you are looking at removing the admin rights for the primary user, then you can use account protection policy under endpoint security profiles to modify the local admin memberships.
Hi @Rahul Jindal [MVP] Thanks for your help,
Yes I am looking same, there are more than 20K workstations. Each machine login by each different login ID. How we can add them all in account protection policy .
can you share me any blog related same. It will be helpful me
@Vij Thanks for posting in our Q&A.
As Rahul Jindal said, I will share you an article about it:
https://www.anoopcnair.com/manage-local-admins-using-intune-group-mgmt/
Note: Non-Microsoft link, just for the reference.
Hope it will give you some ideas.
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.