Intune Account Protection, remove local admin

Hello folks,

I’ve encountered a issue while attempting to remove local administrators through Intune’s Endpoint Security, under the Account Protection section.
My plan was to enforce this policy across different tenants, but I’ve run into a problem.

I applied this setting to three different tenants.
I received error messages in the report for the profile on two of them, while it was successfully applied on the third. The error details are as follows:

  • Setting: Group Configuration
  • Error Type: 2
  • Error Code: 65000

I checked if the Windows feature version might be related, but the issue persists even on the most recent versions. I also explored any differences between Windows Pro and Business editions.

  1. Has anyone else encountered this specific issue, and if so, how was it resolved?
  2. Are there known compatibility issues with certain Windows versions or editions that I might have overlooked?


    Thank you in advance for your time and assistance.


Similar Posts