Skip to content
  • There are no suggestions because the search field is empty.

ACSC E8 Nov 2023-ML1 Restrict admin privileges

Overview

The Devicie Essential Eight Maturity Level 1 Restrict Administrator Privileges (Nov 2023) configuration is to meet the Australian Cyber Security Centre’s guidance for this mitigation strategy.

Intune Description:

E8 ML1 Restrict Admin Privileges (Nov 2023)

Scope:

This baseline should be applied to Windows devices.

Policy Impact Areas:

When deployed, this policy will impact:

  • Blocking local log in

  • Blocking remote desktop services log on

Deployment Notes

  1. Pre-Deployment Considerations:

    • Review any other administrative control products or configurations in use

  2. Post-Deployment Validation:

    • Attempt to use elevated credentials

Configuration Settings:

 

Name

Value

User Rights

Deny Local Log On

*S-1-5-32-546

Deny Remote Desktop Services Log On

*S-1-5-32-546

Devicie Template Name

ACSC E8 Nov 2023-ML1 Restrict admin privileges

Default Intune Deployed Name

DEVICIE-PROD-ACSC E8 Nov 2023-ML1 Restrict admin privileges

Version

1.0

Template Last Updated

Jul 8, 2025

Document Last Updated:

Jul 8, 2025