Azure AD Device Owners.

Question

Hi Techies,
I have a doubt regarding azure ad device owners.
While going through documentation I have seen a point that all device owners by default will have local administrator privilege.
But in my case, I have a scenario where a device owner is not having local administrator privilege.

Answer 1

Hi @Anonymous

Device owners do not gain local administrator privileges.

Please read the following documentation for managing local administrators:

How to manage the local administrators group on Azure AD joined devices

https://learn.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

----------------------------------

If this is helpful please accept answer.

Answer 2

While going through documentation I have seen a point that all device owners by default will have local administrator privilege.

Can you provide a reference link to this please?

Answer 3

Hello @Anonymous ,

Kindly validate if the impacted user has Azure AD P1 or P2 license. If yes then try following:

• Create a local admin on the device.
• Launch CMD in administrator mode.
• Run "dsregcmd /leave"
• Sign in with a local account on the device.

Please do let me know if you have any queries in the comments section.

Thanks,
Akshay Kaushik

Please "Accept the answer", "Upvote" and rate your experience if the suggestion works as per your business need. This will help us and others in the community as well.