Clearly, no end user should have local administrator rights on their device. Unfortunately, there are still programs that… Read More »RunAsRob & Intune - The Part-Time Admin
The approach of operating devices without local administrators or “adminless” should always be followed and is essential from a security perspective.
Unfortunately, this is not equally easy to implement in every scenario. Various tools such as LAPS, MakeMeAdmin, AdminByRequest and others can support you.