How to create local admin account and push on fresh brand new devices via Intune?

Question

How to create local admin account and push on fresh brand new devices via Intune?

Here is use case:

We wanted to push the local admin account on each devices so that Helpdesk team can take control of users devices in case they need to work on users devices and resolve any issues of users on apps and any other troubleshooting.

We are only cloud only so we dont have on-premises setup like SCCM and AD.

Answer 1

With powershell, here you go;

1. New-LocalUser "vinodadmin" -Password (ConvertTo-SecureString -AsPlainText -Force 'YourPassword')
2. Add-LocalGroupMember -SID "S-1-5-32-544" -Member "vinodadmin"

Answer 2

@Vinod Survase Thanks for posting in our Q&A.

Off course you can deploy the PowerShell script via intune as Pavel said. Here is the link about how to deploy scripts via intune.

https://learn.microsoft.com/en-us/mem/intune/apps/intune-management-extension

And we can also deploy a custom profile to make it. Please refer to the part "In case of a non-domain account" of the following blog written by Rahul.

https://rahuljindalmyit.blogspot.com/2021/05/intune-different-ways-of-setting-local.html

Note: Non-Microsoft link, just for the reference.

Hope it will help.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.