Skip to content
WindowsHardening

Guides tagged

#local-admin

← Back to all guides
Accounts & Privileged Access

Remove local admin rights from users without chaos

Take local admin rights away from users: inventory who has them, enforce membership with GPO or Intune, handle elevation with EPM, keep a break-glass path.

Foundation
Accounts & Privileged Access

UAC hardening and Windows Administrator protection

Configure UAC properly: Admin Approval Mode, secure desktop, FilterAdministratorToken, remote UAC for local accounts, and Windows 11 Administrator protection.

Intermediate
Accounts & Privileged Access

Deploy Windows LAPS: unique local admin passwords

Replace shared local Administrator passwords with Windows LAPS: schema, permissions, Group Policy settings, encryption, retrieval and the checks that prove it works.

Foundation