Skip to content

Commit 5e9cbef

Browse files
committed
Add link to Azure AD docs for this capability
1 parent d7c2f81 commit 5e9cbef

1 file changed

Lines changed: 5 additions & 2 deletions

File tree

memdocs/intune/protect/endpoint-security-account-protection-policy.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -64,6 +64,9 @@ View [settings for account protection profiles](../protect/endpoint-security-asr
6464

6565
Use the Local user group membership (preview) profile to manage the users that are members of the built-in local groups on Windows 10/11 devices that receive this policy.
6666

67+
> [!TIP]
68+
> To learn more about support for managing administrator privileges using Azure Active Directory (Azure AD) groups, see [Assign local admins to Azure AD joined devices](/azure/active-directory/devices/assign-local-admin#manage-administrator-privileges-using-azure-ad-groups-preview) in the Azure AD documentation.
69+
6770
### Configure the profile
6871

6972
This profile manages the local group membership on devices through [Policy CSP - LocalUsersAndGroups](/windows/client-management/mdm/policy-csp-localusersandgroups?WT.mc_id=Portal-fx). The CSP documentation includes additional details on how configurations apply, and an FAQ about the use of the CSP.
@@ -86,12 +89,12 @@ The following are the configurations you can make:
8689
8790
- **User selection type**: Choose how to select users. Options include:
8891

89-
- **Users**: Select the users and user groups from your Azure Active Directory (Azure AD).
92+
- **Users**: Select the users and user groups from your Azure AD.
9093
- **Manual**: Specify Azure AD users and groups manually, by username, domain/username, or the groups security identifier (SID).
9194

9295
- **Selected user(s)**: Depending on your selection for *User selection type*, you’ll use one of the following options:
9396

94-
- **Select user(s)**: Select the users and user groups from your Azure Active Directory (Azure AD).
97+
- **Select user(s)**: Select the users and user groups from your Azure AD.
9598
- **Add users(s)**: This opens the **Add users** pane where you can then specify one or more user identifiers as they appear on a device. You can specify the user by *Username, Domain/username*, or by *security identifier (SID)*.
9699

97100
:::image type="content" source="./media/endpoint-security-account-protection-policy/add-user.png" alt-text="Screen shot of the Add users page.":::

0 commit comments

Comments
 (0)