Account protection policy for endpoint security in Intune

Question 1

What is the purpose of account protection policies in Windows?

Answer 1

Help protect user credentials

Focus on device-scoped and user-scoped settings for Windows Hello for Business and Credential Guard

Question 2

What is the prerequisites for Account protection profiles?

Answer 2

devices must run Windows 10 or Windows 11

Question 3

What is the prerequisites for Local user group membership profile?

Answer 3

devices must run Windows 10 20H2 or later, or Windows 11

Question 4

What are the 3 account protection profiles ?

Answer 4

• Account protection
• Local admin password solution (Windows LAPS)
• Local user group membership

Question 5

Where can you create an account protection policy ?

Answer 5

In Endpoint security > Under Manage > Account protection

Question 6

What does Windows LAPS stand for?

Answer 6

Local administrator password solution

Question 7

What is the main function of Windows LAPS?

Answer 7

Management of a single local administrator account per device

Question 8

How can Intune policy specify which local admin account it applies to?

Answer 8

By use of the policy setting Administrator Account Name

Question 9

What can the local user group membership profile be used for?

Answer 9

Add, remove, or replace members of built-in local groups on Windows devices