Skip to content
  • There are no suggestions because the search field is empty.

ACSC E8 Nov 2023-ML1 Restrict admin privileges

Overview:

The Devicie Essential Eight Maturity Level 1 Restrict Administrator Privileges (Nov 2023) configuration is to meet the Australian Cyber Security Centre’s guidance for this mitigation strategy.

Intune Description:

E8 ML1 Restrict Admin Privileges (Nov 2023)

Scope:

This baseline should be applied to Windows devices.

Policy Impact Areas:

When deployed, this policy will impact:

  • Blocking local log in

  • Blocking remote desktop services log on

Deployment Notes

  1. Pre-Deployment Considerations:

    • Review any other administrative control products or configurations in use

  2. Post-Deployment Validation:

    • Attempt to use elevated credentials

Known Issues and Resolutions

  • Issue 1: None at this time

    • Resolution: N/A 

Configuration Settings:

Name

Value

User Rights

Deny Local Log On

*S-1-5-32-546

Deny Remote Desktop Services Log On

*S-1-5-32-546

Devicie Template Name

ACSC E8 Nov 2023-ML1 Restrict admin privileges

Default Intune Deployed Name

Devicie - ML1 Restrict admin privileges

Version

1.0

Template Last Updated

Nov 18, 2024

Document Last Updated:

Jul 24, 2025