Change Intune enrolled user from Standard user to Administrator (Windows 10)

Question

So we have 2 different Windows Autopilot Deployment profiles. Only difference is that in 1 profile the User account type is Standard and the other is Administrator.

Once a user is enrolled with the User account type Standard on a Win10 device I would like to know what the best way is to change that user to local Administrator afterwards.

Thanks in advance.

Answer 1

@Chned Thanks for posting in our Q&A.

For this requirement, I have done the test in my lab. Here are the details:

-->When my user is enrolled with Standard account on a windows 10 device, I run the following command to elevate my AzureAD user to become a local administrator.

net localgroup administrators /add "AzureAD\UserUpn"  

-->Check in Computer Management > Local Users and Groups > Groups > Administrators and find that my AzureAD user is added into Administrator group.

Hope it can help.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

More importantly why would you want to do that? You should give the least possible permissions to your users.

Answer 3

Ofcourse, but sometimes it's inevitable and only allowed for just a handful of very experienced users.

But apart from this discussion; does anyone know a proper way to achieve this?

Answer 4

@Lu Dai-MSFT How about the reverse: users were deployed as administrator from autopilot policy but now we want to make them standard users

Answer 5

Is it possible to take this scenario and add the Following abilities:

-Grant a standard user timed local administrator rights, meaning that the through a scheduled task the account after lets say 5 minutes would be removed from Administrators group

• Publish this as a application in SCCM in order to leverage approval / made available in the company portal when users have been approved by management.