Improvements to local administrative access controls on Windows devices

We are updating the administrative privileges setting for Windows device management to give administrators more control over how local administrative access is handled on Windows 10 and Windows 11 devices, managed by Google Endpoint Management.

This update simplifies settings and provides greater flexibility for organizations that need to preserve local admin access while managing specific users via Google Workspace. Previously, managing local administrative access used a "Replace" behavior, which removed any existing members from the local administrators group before adding the newly requested ones.

Getting started

Rollout pace

Availability

  • Business Plus
  • Enterprise Standard and Plus
  • Enterprise Essentials and Enterprise Essentials Plus
  • Frontline Starter, Standard, and Plus
  • Cloud Identity Premium
  • Education Standard and Plus
  • Endpoint Education add-on

Resources