{"id":6871,"date":"2023-04-26T01:00:46","date_gmt":"2023-04-26T01:00:46","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=6871"},"modified":"2023-04-26T01:00:48","modified_gmt":"2023-04-26T01:00:48","slug":"intune-enumerate-administrator-accounts-on-elevation","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/intune-enumerate-administrator-accounts-on-elevation","title":{"rendered":"Intune – Enumerate administrator accounts on elevation"},"content":{"rendered":"\n

<\/p>\n\n\n\n

Option 1<\/strong> – Set the following Group Policy:
Computer Configuration\\Policies\\Administrative Templates\\Windows Components\\Credential User Interface\\Enumerate administrator accounts on elevation<\/em>
To the following value: Disabled<\/em><\/p>\n\n\n\n

Option 2<\/strong> – Follow these steps to apply a MEM policy:<\/p>\n\n\n\n

    \n
  1. Go to the Devices-> Configuration profiles<\/strong><\/a><\/li>\n\n\n\n
  2. To update an\u00a0existing policy:<\/strong>\n
      \n
    • Click on the policy name in the list<\/li>\n\n\n\n
    • In the navigation bar, click on Properties<\/strong><\/li>\n\n\n\n
    • Next to Configuration settings<\/strong> click on Edit<\/strong><\/li>\n\n\n\n
    • Go to step #4<\/li>\n<\/ul>\n<\/li>\n\n\n\n
    • If you\u2019d like to create a\u00a0new policy<\/strong>, click on the\u00a0Create Policy<\/strong>\u00a0button\n
        \n
      • in the side panel, choose:\n
          \n
        • Platform:<\/strong> Windows 10 and later<\/li>\n\n\n\n
        • Profile Type: <\/strong>Administrative Templates<\/li>\n<\/ul>\n<\/li>\n\n\n\n
        • Click on Create<\/strong> button<\/li>\n\n\n\n
        • Proceed to step #4<\/li>\n<\/ul>\n<\/li>\n\n\n\n
        • In the\u00a0Configuration settings<\/strong>\u00a0wizard step, set the following:\n
            \n
          • Set Computer Configuration-> Windows Components-> Credential User Interface-> Enumerate administrator accounts on elevation<\/strong> to Disabled<\/strong><\/li>\n<\/ul>\n<\/li>\n\n\n\n
          • Complete all remaining wizard steps, review and Save<\/strong> policy<\/li>\n<\/ol>\n\n\n\n

            Option 3<\/strong> – Set the following registry value:
            HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\CredUI\\EnumerateAdministrators<\/em>
            To the following REG_DWORD value:
            0<\/em><\/p>\n\n\n\n

            <\/p>\n","protected":false},"excerpt":{"rendered":"

            Option 1 – Set the following Group Policy:Computer Configuration\\Policies\\Administrative Templates\\Windows Components\\Credential User Interface\\Enumerate administrator accounts on elevationTo the following value: Disabled Option 2 – Follow these steps to apply a […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-6871","post","type-post","status-publish","format-standard","hentry","category-research"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/6871","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/comments?post=6871"}],"version-history":[{"count":1,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/6871\/revisions"}],"predecessor-version":[{"id":6872,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/6871\/revisions\/6872"}],"wp:attachment":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/media?parent=6871"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/categories?post=6871"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/tags?post=6871"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}