Admin Shares

Question

Hello,

When we deploy workstation using autopilot and intune, how we can access the admin shares? Usually we can access the admin shares using administrator account if the workstation joined to AD on-prem. How if the devices joined to AAD?

Answer 1

@Handian Sudianto, Thanks for posting in Q&A. Based as I know, Administrative shares can be accessed by members of the computer’s local Administrators Administrators group. For Autopilot enrolled deice, the built administrator account will be disabled due to security reason. So it is unable to access via this account.

But the global administrator will be added to Microsoft Entra joined device, when it joins to Microsoft Entra. You can try this account to access the admin shares to see if it can work. Or if there's any other local admin account on the device, you can also use it.

In addition, if you want to add new local admin into local administrators group in bulk, you can try Local user group membership policy in Intune. Here is a link with more details for the reference:

https://techcommunity.microsoft.com/t5/intune-customer-success/new-settings-available-to-configure-local-user-group-membership/ba-p/3093207

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.