New
#11
actually, you can - all you need is local admin - or some other elevated rights :)
that's fine. and accurate as goes policy processing.
but lets take up the point of a privileged task - say routing or rather the ability to add/set/remove routes.
if your domain account is added to the local admin group, manually or by gpo, you indeed have (more) privileged rights