Non admin laptop account for students

Question

I've just setup our on prem 2019 server to sync with Azure AD.

When I log into a laptop from the OOBE the student account logs in fine but is an Administrator on the laptop.

How can I set it so they are just a user on the laptop??

Thanks!

Answer 1

Hey,

What you probably want to take a closer look at is Autopilot. This gives you as an IT admin the capability to choose if the user that enrolls the device should be Administrator on that machine or a Standard user.

https://learn.microsoft.com/en-us/mem/autopilot/enrollment-autopilot

When you are creating your "autopilot profile" you can select "user account type" to predetermine if the user should be a admin or standard user on that machine.

https://learn.microsoft.com/en-us/mem/autopilot/enrollment-autopilot#create-an-autopilot-deployment-profile

Answer 2

Awesome answer!

Makes sense. I'm deploying Windows 10 to 115 HP laptops using MDT/WDS. I wonder if I can export the needed data during the task sequence using a script??