From 2f6cacb09df585cd5d3f09d352115564d8f9b477 Mon Sep 17 00:00:00 2001
From: Graham Williams <gray@fleetdm.com>
Date: Thu, 16 Oct 2025 17:08:04 +0100
Subject: [PATCH] Create Profile: Disable Local Administrator (#34344)

- Administrator account starts as enabled: True
- Profile verifies: True
- Administrator account disabled after apply: True

<img width="1654" height="1113" alt="image"
src="https://github.com/user-attachments/assets/9551d87a-341a-49e3-8d0b-15c86ea1b81c"
/>

<img width="2043" height="424" alt="image"
src="https://github.com/user-attachments/assets/acbfa66d-2684-43b8-a964-f7679fd861e8"
/>
---
 ...iessecurityoptions-disable-adminaccountstatus.xml | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 docs/solutions/windows/configuration-profiles/windows-localpoliciessecurityoptions-disable-adminaccountstatus.xml

diff --git a/docs/solutions/windows/configuration-profiles/windows-localpoliciessecurityoptions-disable-adminaccountstatus.xml b/docs/solutions/windows/configuration-profiles/windows-localpoliciessecurityoptions-disable-adminaccountstatus.xml
new file mode 100644
index 0000000000..bc91f81d6d
--- /dev/null
+++ b/docs/solutions/windows/configuration-profiles/windows-localpoliciessecurityoptions-disable-adminaccountstatus.xml
@@ -0,0 +1,12 @@
+<Replace>
+    <CmdID>1</CmdID>
+    <Item>
+        <Target>
+            <LocURI>./Device/Vendor/MSFT/Policy/Config/LocalPoliciesSecurityOptions/Accounts_EnableAdministratorAccountStatus</LocURI>
+        </Target>
+        <Meta>
+            <Format xmlns="syncml:metinf">int</Format>
+        </Meta>
+        <Data>0</Data>
+    </Item>
+</Replace>