Improvements to local administrative access controls on Windows devices
WorkspaceFebruary 17, 2026
Improvements to local administrative access controls on Windows devices
We are updating the administrative privileges setting for Windows device management to give administrators more control over how local administrative access is handled on Windows 10 and Windows 11 devices, managed by Google Endpoint Management.
This update simplifies settings and provides greater flexibility for organizations that need to preserve local admin access while managing specific users via Google Workspace. Previously, managing local administrative access used a "Replace" behavior, which removed any existing members from the local administrators group before adding the newly requested ones.
Getting started
- Admins: Visit the Help Center to learn more about managing Windows device privileges.
- End users: There is no end user setting for this feature.
Rollout pace
- Rapid Release and Scheduled Release domains: Available now
Availability
- Business Plus
- Enterprise Standard and Plus
- Enterprise Essentials and Enterprise Essentials Plus
- Frontline Starter, Standard, and Plus
- Cloud Identity Premium
- Education Standard and Plus
- Endpoint Education add-on
