It might be better to talk to Microsoft directly for the best approach to your question, I don't think you will get the answers you need from a help forum.
Question on administrator group permission for user profile folder
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 79%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMP%3C/text%3E%3C/svg%3E)
MOHANTY Priya Ranjan
40
Reputation points
when a new user profile is created on windows 11, the Administrators groups is getting added to security tab on every user profile folder permissions. How can we remove it. Th goal is to have only user himself and system to have permission on the profile
Windows for business | Windows Client for IT Pros | Directory services | User logon and profiles
Answer accepted by question author
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(160, 21%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EB%3C/text%3E%3C/svg%3E)
BryceSor 4,490 Reputation points Volunteer Moderator2025-08-03T06:58:52.1166667+00:00
1 additional answer
Sort by: Most helpful
-
BryceSor 4,490 Reputation points Volunteer Moderator
2025-08-01T21:57:06.17+00:00 Hi MOHANTY Priya Ranjan,
As far as I know its by design and removing those settings or adjusting might cause you problems with recovery and folders being managed.
What issues are you having? and is the user a standard user?
-
MOHANTY Priya Ranjan 40 Reputation points
2025-08-02T12:58:55.6233333+00:00 Hello Bryce,
It is a compliance requirement that business is trying to enforce. Although, I believe that Administrators group is the owner of the every user profile created, and removing the permission only is not foolproof since members of administrator group can elevate and get access to them anyway.
But due to compliance requirement was looking to find a way to do it on the base image.
Sign in to comment -