My credentials aren't admin level

Question

I setup my work laptop as for business or school, but now don't have admin credentials to install anything.

Answer 1

Hi Liz Popp,

I am following up on this because losing administrative control over your own hardware is a critical obstruction.

If performing the system reset is not an option—perhaps because you have already generated data on the drive that cannot be backed up—there is only one non-destructive technical alternative: you must physically hand the device to your organization's IT department. Since the device is now domain-joined to their cloud tenant, a user holding the "Global Administrator" or "Azure AD Joined Device Local Administrator" role within the organization can physically log into your laptop's Windows lock screen using their own corporate credentials. Once authenticated, they will have the elevated privileges required to access the Computer Management snap-in (compmgmt.msc) and manually add your user profile to the local "Administrators" group.

However, if you do not have access to an IT administrator with those specific cloud roles, or if this is a personal device where you cannot wait for enterprise support, the reset via the Windows Recovery Environment (Shift + Restart) remains the definitive fix. It is the only mechanism that forcibly strips the Entra ID token and allows you to re-initialize the Security Account Manager (SAM) database with yourself as the owner.

I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to accept answer. Should you have more questions, feel free to leave a message. Have a nice day!

VPHAN

Answer 2

Hi Liz Popp,

When you select "Set up for work or school" during the initial installation, Windows attempts to join the device directly to your organization's Entra ID (formerly Azure AD) tenant. If your organization's cloud policy is configured to provision users as "Standard Users" rather than "Administrators" (which is the secure default), or if the token handshake was incomplete, you effectively lock yourself out of your own machine with restricted permissions immediately upon reaching the desktop.

Since you do not have an administrator account to authorize a change in privileges, you cannot simply promote yourself via settings or command prompt; you are structurally stuck. The only reliable way to reclaim ownership of the hardware is to perform a factory reset and use a specific setup sequence that guarantees local administrator rights. You can initiate this by holding down the Shift key on your keyboard while selecting Restart from the Start menu power options. This will boot the machine into the Windows Recovery Environment (WinRE), where you can select "Troubleshoot" and then "Reset this PC" to wipe the current restricted configuration and start fresh.

When the device reboots and asks you to set it up again, it is critical that you select "Set up for personal use" instead of "Work or school." This choice forces Windows to create a Local Administrator account (or a personal Microsoft Account with admin rights) as the primary identity. Once you reach the desktop and have full control, you can then go to Settings > Accounts > Access work or school and click Connect to link your business credentials. This "layered" approach gives you the best of both worlds: it registers the device with your company for email and OneDrive access, but it keeps your underlying local profile as the master administrator, preventing the lockout you just experienced.

I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to ACCEPT ANSWER. Should you have more questions, feel free to leave a message. Have a nice day!

VPHAN

Answer 3

If you do not have admin credentials on your work laptop, you will need to contact your organization's administrator for assistance. They can either provide you with the necessary permissions or install the software you need on your behalf. In a business or school environment, administrative privileges are typically restricted to ensure security and compliance with organizational policies.

If you're unsure who your admin is, here are some tips:

1. Universities and schools: Contact your technical support team, usually found on your university's website.
2. Large businesses: Reach out to your internal help desk or technical support.
3. Small businesses: Contact the business owner or co-owner, who often has admin permissions.

Remember, you cannot install software or make system changes without the appropriate permissions.