Intune Autopilot Device with Assign Local Administrator Right After Deployment.

Question

Hi All,

I have Assign Autopilot to my window 10 Devices with User account type "Standard". at Home > Devices > Enroll devices > Windows Autopilot deployment profiles > Autopilot Policy.

Right now some of the devices which is VIP User have submit to allow the login to have "Local Admin Right" instead of "Standard" user. because those devices is already been deployed with autopilot with Standard user account type and devices is already in use. is there any policy in Intune that can allow me to assign them "Local admin Right"? and if i can turn off the "Local admin Right" later as well?

Answer 1

@Toh Thanks for posting in our Q&A.

For this requirement, based on my test, we can run the following command to add local admin right to the AzureAD user.

net localgroup administrators /add "AzureAD\UserUpn"  

If we want to turn off "Local admin Right", we can run the following command to delete.

net localgroup administrators /delete "AzureAD\UserUpn"  

However, there is no such settings in intune, if you are interested in this, we can feedback in intune uservoice in the following link. This is a place to collect customers' requirements and problems.
https://microsoftintune.uservoice.com/forums/291681-ideas

Thanks for understanding.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

In addition, see https://www.jeffgilb.com/managing-local-administrators-with-azure-ad-and-intune/ for many details and a complete description on managing local admins with Intune.

Note however that a VIP with local admin access potentially poses a greater security risk than a non-VIP user so I strongly suggest that this course of action be reconsidered. Just because someone thinks their special, doesn't mean they should have a greater potential to compromise the environment's security.