IT Company Support account

Question

Good Day

We are a small IT company that supports a list of clients , in the past we have setup all computer with a spare Administrator account that if the client breaks something we can still access the computer, but with windows 10 and linking to online accounts is there a way to load a office 365 business account to all out clients computers as a Backup admin account .

The main reason we want to do it this way if we change staff and need to update the password we dont go to all computers we just update the office 365 account password and they cant gain access anymore.

Note not all our clients run Windows 10 Pro as some clients are home users .

What is the best way for us to do this ?

Answer 1

I think you are talking about local admin accounts on Azure AD joined computers?
Global Admins should have local admin rights. But you don't want to have a high privileged account for that I think ;-)

Under Azure Active Directory -> Devices -> Device settings you can find a setting "Manage additional local administrators on all Azure AD joined devices"