Least privilege on corporate PCs
Why users don't get local admin, what to offer instead, and how to handle 'I need admin to install this' without weakening security.
- Level
- Beginner
- Length
- About 35 minutes
- Contents
- 3 lessons · 1 video · final exam
- Status
- Published · updated 1 Oct 2026
Skills you'll practise
- Explain why standard user accounts reduce risk
- Offer approved alternatives to local admin (software deployment, managed elevation)
- Handle an admin-rights request professionally and document it
Course outline
- 1.Least privilege on corporate PCsVideo · 5 min
- 2.Admin rights are a risk, not a convenienceLesson · 12 min
- 3.UAC, elevation and what a standard user can still doLesson · 13 min
- 4.Handling software requests without handing out admin rightsLesson · 12 min
- 5.Least privilege on corporate PCs: knowledge checkKnowledge check · 18 questions
- 6.'Just make me an admin'Scenario
- 7.Final exam6 questions · passing it completes the course, so people who already know the material can test out
Sources it draws on
The lessons and questions are written from these references, so learners can go back to the original.
- Microsoft Learn: User Account Control overview
- Microsoft Learn: Windows LAPS overview
- Microsoft Learn: Add apps to Microsoft Intune
- CIS Controls: Controlled use of administrative privileges
See it with your own jobs and topics
Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.