Intune - Run program as on prem admin/user

Question

Hi, we got win11, AAD joined only, with cloud kerberos trust. Works great. However when trying to open certain local programs (like the configuration manager console), as a different user (on prem admin), windows security promt wont accept SAM accountname and password. (wrong username or password). It looks to be asking for email, which the on prem user doesnt have. Trying <doman\username> instead, but getting the error.

Is this just one of the limitations we gotta live with, or is there a workaround? (I could always RDP to a client that has these tools)

Answer 1

So your computer accounts are AAD only but User accounts Hybrid? .

Have you tried with FQDN, like ADDOMAIN.local\admin ?
Can you ping your AD domain, DNS resolution works?

Actually SCCM console delegation to workstation is a pain, with CM you need to add computer accunt as well to CM server local admins or so, so this specific need probably would not work. But you should access network shares with AAD machines still.