If you manage Windows endpoints, you have probably heard at least one of these lines: “If we remove local admin, […]