Intune Autopilot profile user is standard, but its added to the Admin group

Question

hello,

I have noticed this in Windows 11 devices. We have setup the Autopilot profile to create Standard users. This works in Win 10 devices, but in Win 11, the user that enrolls the device is added to the Local Admin groups automatically.

Any way to prevent this?

Βest regards

Kostas

Answer 1

@Kostas Backas ，For our issue, please confirm if any other policies which add user to admin group are deployed to the device. Meanwhile, we can test on some more windows 11 devices to see if it have the same issue.

To remove the user from the device, we can use LocalUsersAndGroups CSP to remove the member. Here is a link for the reference:
https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups

Hope it can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Thank you very much for your answer. There are no other policies. Windows 10 computes deployed using the same method did not have this kind of behavior (Autopilot creates standard users).

Best regards

Kostas