28,661 questions
Sign in to the Azure portal as a Global Administrator.
Browse to Azure Active Directory > Devices > Device settings.
Select Manage Additional local administrators on all Azure AD joined devices.
Select the user you want to remove and select Remove Assignments.
To modify the device administrator role, configure Additional local administrators on all Azure AD joined devices.
See:
How to manage the local administrators group on Azure AD joined devices