Solved Administrator Protection feature not there in Account Protection settings

win11freak · Jan 25, 2025

Running Windows 11 24H2 and I would like to try out the new security feature called Administrator Protection.

I went to Group Policy and I see a different wording called Enhanced Privilege Protection in Admin Approval Mode policy.
Is this the same as Administrator protection?

Then, under Settings under Account Protection I do not see Administrator protection.

I think this is for only for enterprise environments and not for consumers.

garlin · Jan 25, 2025

Windows IT Pro Blog: Administrator protection on Windows 11

Available for Pro or higher editions:
UserAccountControl_TypeOfAdminApprovalMode

FreeBooter · Jan 25, 2025

Enable or Disable Administrator Protection for Admin Approval Mode in Windows 11

This tutorial will show you how to enable or disable Administrator Protection for admin approval mode elevations in Windows 11. Starting with Windows 11 build 27718.1000 (Canary), you can now enable Administrator Protection to use for Admin Approval Mode (aka: elevated rights) instead of User...

www.elevenforum.com

win11freak · Jan 27, 2025

Its still not working - I read the guide and set the Group Policies in place. Rebooted. Still shows the classic UAC prompt.

Is there any specific requirements to run Admin Protection mode like Win 11 Enterprise, or a Policy Pack to implement with Group Policy or maybe the machine needs to be in a Domain?

Im running as a stand-alone machine and a Local Account (no MS account).

What I am doing wrong?

I am also running the latest Build as well.

garlin · Jan 27, 2025

The tutorial says you need to be on Canary builds. Or wait a while until it appears in later Insider builds this year.
If you're on production 24H2, it'll be a while.

win11freak · Jan 27, 2025

Then why is the policy itself there added in Group Policy?
I dont get it.

I downloaded Windows 11 through Rufus then updated it with the latest updates.

I had been testing this feature on a spare PC, but whatever I do I still see the old UAC prompt instead of the Windows Security UAC prompt (Admin Protection).

pseymour · Jan 27, 2025

win11freak said:
Then why is the policy itself there added in Group Policy?
I dont get it.

Because they jumped the gun, adding the policy in before it was ready. See the section on UAC at

Windows 11, version 24H2 security baseline | Microsoft Community Hub

Microsoft is pleased to announce the release of the security baseline package for Windows 11, version 24H2!

techcommunity.microsoft.com

andrew129260 · Jan 27, 2025

Also, there are still some problems with it:

Local Administrator Protection: Failed to find MUI File

Have you enabled Local Administrator Protection and found yourself locked out of your device, receiving the "Failed to find MUI file" error? If so, this guide is here to help!

patchmypc.com

pseymour · Jan 27, 2025

I don't see a problem. There's no more secure system than the one you can't get on.

win11freak · Jan 27, 2025

pseymour said:
Because they jumped the gun, adding the policy in before it was ready. See the section on UAC at

Windows 11, version 24H2 security baseline | Microsoft Community Hub

Microsoft is pleased to announce the release of the security baseline package for Windows 11, version 24H2!

techcommunity.microsoft.com

This makes sense to me now.
Thanks for the article.

andrew129260 · Jan 27, 2025

pseymour said:
I don't see a problem. There's no more secure system than the one you can't get on.

I guess crowdstrike did the world a favor :winkt:

win11freak · Feb 22, 2025

I also installed Windows 11 on a new machine but despite setting the Group Policy for Administrator protection, it will not take effect.

What am I doing wrong here? I also followed various tutorials as well.

I still think that this setting needs Enterprise version with an Intra ID accounts.

It will not work as a standalone account or machine.

pseymour · Feb 22, 2025

Which channel did you install? As garlin said above, it's Canary only. I think that's still true. It does not require Enterprise or Entra ID. I have it on a Pro Canary VM right now.

win11freak · Feb 22, 2025

I downloaded/created the bootable USB ISO Windows 11 Pro 24H2 using Rufus. Then performed a clean install.

But I don't know if it's Canary or whatever channel it might be.

pseymour · Feb 22, 2025

Well, there you go. It's not in a production release of Windows 11, for sure. I'd have to check if it moved beyond Canary, but that was the last info I saw.

win11freak · Feb 22, 2025

So it looks like I need to be patient and wait.
I'm waiting for this because I think it's a great security feature.

win11freak · Apr 29, 2025

Hi, I still don't see this feature under the Account Protection settings. Why is not yet released from Canary to Production?

I had already enable this in Group Policy.

Solved Administrator Protection feature not there in Account Protection settings

Member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Member

My Computer

Well-known member

My Computer

Member

My Computer

Sit back and relax while the magic happens.

My Computer

Well-known member

My Computers

Sit back and relax while the magic happens.

My Computer

Member

My Computer

Well-known member

My Computers

Member

My Computer

Sit back and relax while the magic happens.

My Computer

Member

My Computer

Sit back and relax while the magic happens.

My Computer

Member

My Computer

Member

My Computer

Similar threads