Share via

Intune Device Configuration to Deny Local Log On by a local admin user.

John Park 21 Reputation points
2021-09-16T15:58:06.19+00:00

Hello,

Glad to be here, and hoping someone can help me out. I've created a custom device configuration policy that should restrict a specific local admin user from logging into the windows 10 laptop. My configuration settings are as follows:

Name: Restrict Local Admin Login

Description: Not configured

OMA-URI: ./Device/Vendor/MSFT/Policy/Config/UserRights/DenyLocalLogOn

Data type: String

Value: <![CDATA[.\aLocalAdminUser]]>

After applying the policy to my test device, I see that my user above doesn't get added to the 'Deny log on locally' properties on the device's local security policy.

Is my syntax or data type being used not correct?

I'm at a loss now, so any help is greatly appreciated.

Thanks!

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,970 questions
0 comments
Accepted answer
  1. Nick Hogarth 3,436 Reputation points
    2021-09-16T20:32:22.417+00:00

    Have you read this blog post? It looks like the same error. https://www.inthecloud247.com/restrict-which-users-can-logon-into-a-windows-10-device-with-microsoft-intune/

    Also you can configure this in the Settings Catalog:
    132845-settingscatalog.png

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.