Applocker Implementing Principle of Least Privilege aka Getting rid of Admin Rights

In the new world of Zero Trust most companies are now aiming to get rid of local administrative rights for their end users. Sami Laiho has specialized in this field since 2002 and is the world leading specialist in his field.

Length 1 d

500 + VAT
  • Online and class room

Even the NT 3.1 User Guide states, that in Windows, there is no security if you give people local admin rights. Local admin rights give you the ability to bypass all company Group Policy / MDM -settings, take any logged on users’ identity, read/delete any files on the computer even with Deny ACLs, and probably the worst – the ability to breach the rest of the company systems.

Taking away end-user admin rights can lower the amount of Helpdesk tickets by 75%! Most people say that: “if I don’t have admin rights I can’t fix my computer” – No, in reality, it’s: “if you don’t have admin rights you can’t break your computer!”.

Most people think this hinders usability and is not possible for certain old apps, laptop users, or devs.

Sami has successfully taken away admin rights from all of these, in companies ranking from a single-person to a company with more than half a million users.

Target group

This course is good for IT- or security admins, or project leads.


Basic knowledge of Windows administration, (Azure) Active Directory and network infrastructureThe primary payment method is an invoice. The applicable value-added tax is added to the price of the training. If you would like to pay by credit card, please contact


Course Contents

Module 1: Problems with end-user admin rights

  • How to abuse admin rights
  • How removing admin rights extends the lifetime of OS installation
  • How removing admin rights reduces tickets

Module 2: Different solutions to implement

  • How to move from giving rights to users to giving rights to processes and tasks
  • Different solutions for different budgets
  • Microsoft Endpoint Privilege Management (EPM)
  • How to deal with Devs
  • How to deal with kids/students

Module 3: Daily life of an IT admin without admin rights

  • How to survive without admin rights in daily work

Course Duration

1 days


Sami Laiho

Sign up to a course

Oletko kiinnostunut asiakaskohtaisesta toteutuksesta?

Kerro tarpeesi, niin suunnittelemme koulutuksen tarpeisiinne räätälöitynä.