Change account type Azure Ad join

Question

Good morning to all,

I have this problem that i´m trying to solve it but after some intense reseacrh i can´t find a solution.

When i do Azure AD join with an account it always adds the user as a local administrator. My question is, how can i change this default configuration? and how can i change the account type to standard for a large number of users without doing one by one.

Thank you,

Answer 1

You have to use Autopilot.

• When you setup Autopilot, you have an option to make enrolling user a standard one.

Answer 2

Hi @Vortal ,

Windows Autopilot should be the solution you are looking for. Reference: How to manage the local administrators group on Azure AD joined devices

Autopilot provides you with an option to prevent primary user performing the join from becoming a local administrator.

The other option is bulk enrollment, since an Azure AD join performed in the context of a bulk enrollment happens in the context of an auto-created user. Users signing in after a device has been joined are not added to the administrators group.

EDIT: I answered this before seeing that someone else had commented the same thing, since my browser did not refresh to show the comment. But the previous answer is right :)

Answer 3

Hi there,

Ok i have to create an auto pilot profile with my specifications, including enrolling the account as a standard one. But the problem is that i have already many devices joined on AzureAD as a local administrator and i want to change them to standard without the need of access the computer itself.

I checked the bulk enrollment option but it seems not doing what i need. Is there a way to do this, lets say via powershell command?

Thank you,

Answer 4

How to Azure AD Join Administrator type change to standard type in Azure portal policy.....