This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 41%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
Hi all,
Do users need to be local admins on computers to be able to join them to azure ad?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 24%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
It depends on how you are joining the devices. If it is self service, then yes you need to be an admin on the machine. If you use bulk enrollment then No you do not need to be an admin. Here are the options on joining devices: https://learn.microsoft.com/en-us/azure/active-directory/devices/azureadjoin-plan#understand-your-provisioning-options
Hi Matt,
We would like to let users joint computers but themselves. All comps are in the workgroup.
In that case the user would need to be an administrator on the device. The instructions for them to do it are here: https://learn.microsoft.com/en-us/azure/active-directory/user-help/user-help-join-device-on-network#to-join-an-already-configured-windows-10-device.
Once they get to step 2, they would see a warning that they need to sign in as an admin, like this:
