Learn how the Administrator Protection feature in Windows 11 uses the ShadowAdminPairs key to map ENTRA user SIDs to local admins
Local Administrator Protection vs. EPM: The Differences Explained!
After posting the blog about Administrator Protection, one question kept coming up: What are the key differences between Administrator Protection vs EPM (Endpoint Privilege Management)? Some even wondered if EPM is being replaced now that Administrator Protection is here. Let’s clear things up!
Strengthening Local Admin Security in Windows 11 with Administrator Protection
This blog will focus on a new Windows 11 insider build feature, Administrator Protection, announced in the latest Windows Insider Canary build (27718).
This feature is designed to eliminate always-on admin rights. Instead, it uses a hidden elevation mechanism to provide just-in-time privileges when needed, keeping admin rights in the shadows until required. “I am the Shadow Admin, always present but never seen.”
The Battle Of The Local Administrator And Autopilot Device Preparation
In this blog, I will discuss how I found out a specific entra setting was […]