Windows v4.0.1 - 2026-11-05 - Bug Fix

Changed/Updated 🔄️

Settings Catalog

🔄️Win - OIB - SC - Device Security - D - Administrator Protection

After adding the Administrator Protection policy in v3.7, the underlying features has been changed about quite a bit. The feature is now available as of the October 2026 Security Update. Unfortunately, this has apparently caused various issues with LAPS, and MS have updated their own documentation to state this: https://learn.microsoft.com/en-us/windows/security/application-security/application-control/administrator-protection/?tabs=intune#troubleshooting

On the back of an active discussion has been happening on GitHub under Issue #264, an identified resolution has being found, and considering the OIB's intention of managing devices via LAPS, the following change has been made:

• Changed "User Account Control Type Of Admin Approval Mode" from 2 - Admin Approval Mode with Administrator protection to 1 - Legacy Admin Approval Mode. Resolves #264