Microsoft
MD-102 · Question #432
You have a Microsoft 365 subscription that contains a user named User1 and uses Microsoft Intune Suite. You use Microsoft Intune to manage devices that run Windows 11. You need to remove User1 from…
The correct answer is B. an account protection policy. https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-account-protection-policy
Submitted by eva_at· Apr 18, 2026Protect devices
Question
You have a Microsoft 365 subscription that contains a user named User1 and uses Microsoft Intune Suite. You use Microsoft Intune to manage devices that run Windows 11. You need to remove User1 from the local Administrators group on all enrolled devices. What should you configure?
Options
- Aa device compliance policy
- Ban account protection policy
- Can app configuration policy
How the community answered
(36 responses)- A6% (2)
- B81% (29)
- C14% (5)
Explanation
https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-account-protection-policy
Topics
#Local Administrators#Account Protection Policy#Windows 11#Intune enrollment
Community Discussion
No community discussion yet for this question.