IMPORTANT

Turning off everything effectively means giving users back their local admin rights. Think about this carefully before doing it.

To turn off everything except logging actions to the Auditlog, you need to:

  1. Authorization: turn On  Allow Run As Admin and turn Off all other toggles

  2. Authorization: turn On  Allow Admin Sessions and turn Off all other toggles.

  3. Authorization: make the Access time (minutes) a large number that covers most of the day. For example, 480 minutes (8 hours).

  4. Lockdown: turn Off  Revoke admin rights.

For more information, refer to Authorization tab under Windows Settings.

You can also check out the WHIZ usage persona for a 10-minute video on how to accommodate developers or power users.