#Local users and groups windows 10 update

The SID of an Azure AD group can be easily found using the Graph Explorer. For adding or removing Azure AD groups using this policy, we must use the group SID. The setting can be used on Azure AD joined and Hybrid AAD joined devices.

Manage the Administrators group of an AAD joined device : Specifies the SID or name of the member to remove from the specified group.ДЄs stated in the documentation starting from this Windows 10 build, it is recommended to use the LocalUsersandGroups policy instead of the RestrictedGroups policy.Д«elow I will show some examples of how the setting can be used and what the end result is. : Specifies the SID or name of the member to configure.

#Local users and groups windows 10 update

: Specifies the action to take on the local group, which can be Update and Restrict, represented by U and R: If there are multiple errors, the last error is returned at the end of the policy processing. If name/SID lookup fails, the group is skipped and the next group in the XML file is processed. If you specify a name, the LookupAccountNameВ API is used to lookup the group and validate the name. If you specify a SID, the LookupAccountSidВ API is used to translate the SID to a valid group name. : Specifies the name or SID of the local group to configure. HereвЂ™s an example of the policy definition XML for group configuration: Restrict will replace group membership as the old policy did. With the new policy, we can define a group action: Update or Restrict. With that policy, we did an overwrite (replace) of the current group members. With this new setting, we are able to add members to a local group, which was not possible with the old RestrictedGroups policy. With the upcoming release of Windows 10 20H2, we get a new Policy CSP to manage Local Users and Groups with Microsoft Intune: LocalUsersAndGroups.