Windows 10: Prevent admin sign in to endpoints

We work in Australia and all our devices are Azure AD joined and managed by Intune. We are being asked to become compliant with the ACSC Essential 8. One of the requirements is "Privileged accounts excluding local administrator accounts cannot logon to unprivileged operating environments."Is anyone aware of any settings that can prevent administrator accounts from logging into Azure AD joined devices?

:)

 

admin password?

You can reset the Admin Password using Windows XP repair; See Here for step by step.

*Toast :toast:

 

How to change admin user account name?

ah so main admin account is 'wizzle' which is what I am currently on
I make another account called 'wizzle2' (with admin rights)
I sign out of 'wizzle' and sign into 'wizzle2'.
And once signed into 'wizzle2', then I do the command prompt step and find the SID for 'wizzle' that is listed and go from there?

 

Mail app only working when signed in under Admin account


Upgraded from Windows 7 about two months ago, but this just started a few days ago.
Tried to read my email and found that I could not use the mail app when signed in under my User account. (previously worked fine.)
If I sign in under my Admin account, the mail app works normally.
I've tried deleting and reinstalling the mail/calendar app, and now I don't even have the icons to launch them- not even listed on the start menu, except when using the Admin account.
Is there another way to launch or repair the app?
Any suggested fixes?
Don't want to keep having to sign in as Admin just to read my email.
Thanks!