Administrator protection settings in Account protection policies

What changed

On supported Windows 11 versions, admins can configure the Administrator Approval Mode type and choose the elevation prompt behavior for Administrator protection. For more information, see Account protection policy .

Why it matters

Administrator Protection adds user authentication to privileged actions and can change elevation behavior for administrators, installers and support tools on managed Windows devices.

Known limitations

• Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.

Now check

• Confirm supported Windows builds and the two Administrator Protection settings in the Endpoint security Account Protection profile
• Pilot approval-mode and elevation-prompt behavior with standard admin, software-installation and helpdesk scenarios
• Validate authentication prompts, application compatibility, policy conflicts, reporting and emergency rollback