How to remove AAD users as local admins

Question

How to remove AAD users as local admins

Bhaskar Sharma 20

Hi,
All our devices have AAD accounts added as local admins. How can I remove all these users as admins via intune
I have the following setup in endpoint security >
User groups > remove > added all AAD users

assignment
assigned to all devices.

This shows as succeeded in report but users are still added as local admins
Thank you

JamesTran-MSFT 36,871 Reputation points Microsoft Employee

2023-08-07T21:08:47.26+00:00

@Bhaskar Sharma

I wanted to check in and see if you had any other questions or if the answers below helped to resolve your issue?

Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Accepted answer

2 additional answers

Your answer

JamesTran-MSFT 36,871 Reputation points Microsoft Employee

2023-08-07T21:08:47.26+00:00

@Bhaskar Sharma

I wanted to check in and see if you had any other questions or if the answers below helped to resolve your issue?

Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Answer 1

Lu Dai-MSFT 28,486

@Bhaskar Sharma Thanks for posting in our Q&A.

For this issue, I have done the test in my lab. It works well. I will share you some information.

In my test, I want to remove "AzureAD\test2" in the administrator group and I deploy this profile to my device group. Here is my configuration:

User's image

After this profile shows successful deployment, I restart the target device and the I find that "AzureAD\test2" is removed successfully.

User's image

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Lu Dai-MSFT 28,486 Reputation points

2023-08-07T02:02:46.8166667+00:00

@Bhaskar Sharma Is there any other assistance that we can provide? If you have any questions or concerns on the recent information I've provided you, please don't hesitate to let me know.
Bhaskar Sharma 20 Reputation points

2023-08-10T19:56:38.45+00:00

@Rudy Ooms Thanks for the blog. It seems like its just a bit slow as I can slowly see devices removing azure ad accounts as local admins. Ill wait and keep checking but for now it works.
Thank you

Answer 2

kam 0

I had the same issue. If you have your users do a reboot are they still local admins?

Answer 3

Rudy Ooms 691 MVP

Multiple options.... I have written a couple of blogs about this topic

https://call4cloud.nl/2021/04/dude-wheres-my-admin/

IN that blog I am also mentioning the possiblity to remove local admins with a powershell script

https://call4cloud.nl/2020/03/remove-all-local-admins/

Bhaskar Sharma 20 Reputation points

2023-08-10T19:56:33.3466667+00:00

@Rudy Ooms Thanks for the blog. It seems like its just a bit slow as I can slowly see devices removing azure ad accounts as local admins. Ill wait and keep checking but for now it works.
Thank you

Share via

How to remove AAD users as local admins

2 additional answers

Your answer