Remove Local admin privilege for Azure AD joined users and make them std users

Question

Hi,

We have some users Azure AD joined and by default they are the local administrators. Since this is something we dont want in our company and would like to make them as a std user and elevate UAC settings.

How can we remove these users from local admin privilege and convert them to std users while most of the users are WFH.

Answer 1

Hi @akhila nelson

Thanks for reaching out to Microsoft Q&A.

Microsoft Entra Joined Device Local Administrators are assigned to all Microsoft Entra joined devices. You can't scope this role to a specific set of devices

You can manage the Microsoft Entra Joined Device Local Administrator role from Device settings.

1. Sign in to the Microsoft Entra admin center as at least a Privileged Role Administrator.
2. Browse to Identity > Devices > All devices > Device settings.
3. Select Manage Additional local administrators on all Microsoft Entra joined devices.
4. Select Add assignments then choose the other administrators you want to add and select Add.

To modify the Microsoft Entra Joined Device Local Administrator role, configure Additional local administrators on all Microsoft Entra joined devices.

Additionally, you can also remove users using Intune or another MDM solution or locally using the command prompt:

• If your tenant users are synchronized from on-premises Active Directory, use net localgroup administrators /delete "Contoso\username".
• If your tenant users are created in Microsoft Entra ID, use net localgroup administrators /delete "AzureAD\UserUpn

Thanks,

Fabio

Answer 2

Hi @akhila nelson

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,

Fabio

Answer 3

Hi @akhila nelson

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,

Fabio