How to elevate a Business Basic account on a new Wind 11 Pro installation to an admin user?

Question

• I installed Win 11 Pro on a new laptop (clean new install) and signed in with my existing business basic account. The user was created (no other user on the machine), but the user is not an admin. The user is joined in Entra ID (Azure AD).
• How can I elevate the user to be an admin?
• I worked with Copilot to figure it out but many times without success.
• Can some one help me?

Answer 1

Good day UCL

You’re on the right track by assigning yourself as a Device Administrator in Entra ID . The tricky part is that Windows doesn’t always expose the “Info” or “Sync” button in the Access work or school settings, especially on certain builds or when the device hasn’t fully registered with Intune/MDM. That’s why you’re not seeing it in your screenshot.

These step you can try:

- Force sync manually: Open a command prompt as admin and run dsregcmd /status to check the join state, then run dsregcmd /sync to force a sync with Entra ID.

- Check device registration: In the Entra admin portal, go to Entra ID > Devices > All devices and confirm your laptop shows up as joined. Sometimes changes take a few hours to propagate

- Re-enroll if needed: If sync still doesn’t apply, creating a temporary local admin account can help. With that account, disconnect and reconnect your Entra ID account. This avoids locking yourself out since your current account is non-admin

- Intune/MDM enrollment: If your org uses Intune, the missing “Info” button can indicate the device didn’t auto-enroll correctly. In that case, manual enrollment via Settings > Accounts > Access work or school > Connect may be required.

Reinstalling Windows 11 Pro is technically an option, but it’s usually overkill. Since you’ve already assigned yourself as a Device Administrator in Entra ID, the role should apply once the device syncs correctly. Reinstalling won’t guarantee faster propagation; it just resets the environment and forces a fresh join.

I hope this information can help you solve the problem. Feel free to click “Accept Answer” so we know we’re heading in the right direction and let me know if you need any assistance. Thank you!

Answer 2

Hi UCL

Since your account is already a Global Administrator in Entra ID, you’re in a good position that role can grant local admin rights on Windows 11 Pro devices once the settings are configured correctly. You can try these steps:

Check Device Settings in Entra ID:

• Go to the Microsoft Entra admin center.
• Navigate to Devices > Device settings.
• Look for the option Additional local administrators on Azure AD joined devices.

Assign Yourself as a Device Administrator:

• Add your Global Administrator account (or a group you belong to) to the Device Administrators role.
• This ensures that when your device syncs with Entra ID, your account is automatically added to the local Administrators group.

Force a Sync

• On your Windows 11 Pro laptop, open Settings > Accounts > Access work or school.
• Select your connected Entra ID account and click Info.
• Scroll down and hit Sync to refresh the policies.

Verify Local Admin Rights

• After syncing, sign out and back in.
• Open Computer Management > Local Users and Groups > Groups > Administrators.
• You should now see your account listed as a member.

If you still don’t see your account elevated, double-check that the device is properly joined to Entra ID and that no conflicting group policies are applied. In managed environments, Intune can also be used to push local admin rights to specific users or groups.

I hope this helps you get admin privileges on your new laptop and let me know any update information

Answer 3

Hi UCL

Thank you so much for your update.

The good news is that this usually isn’t about Entra ID permissions or firewall slots, it’s more about how older drivers interact with Windows 11’s security model.

Canon’s MF4770N drivers are a bit dated, and sometimes they don’t play nicely with modern Windows protections . What you can try is running the installer explicitly as Administrator (right‑click > Run as Administrator), or if that still fails, temporarily disabling SmartScreen or driver signature enforcement just for the install. Once the driver is in, you can turn those protections back on.

So in short: focus on local Windows settings, not Entra ID. Try the elevated run, and if needed, use compatibility mode for the installer. That usually clears it up.

Answer 4

Hello UCL

When you sign in to a new Windows 11 Pro installation using a Microsoft 365 Business Basic account, the account is recognized as an Entra ID (Azure AD) user, but it doesn’t automatically get local administrator rights. By default, the first account created during setup is a standard user if it’s joined to Entra ID.

To elevate your account, i think you’ll need to add it to the local Administrators group. The most straightforward way is to sign in with another local admin account (if available) or use an elevated command prompt with admin rights. Since you mentioned there’s no other user on the machine, you can enable the built-in local administrator account temporarily, sign in with it, and then add your Business Basic account to the Administrators group. Another option is to use Entra ID role assignments if your account has the “Global Administrator” or “Device Administrator” role in Entra ID, Windows will recognize it as an admin once the device syncs properly.

In short: check your Entra ID role assignments first, and if needed, enable the local admin account to grant your user admin rights. After that, you should have full administrative privileges on the laptop.

If this explanation helps resolve your issue, please hit “Accept Answer” it lets us know the guidance was useful and let me know if you need any assistance. Thank you

Answer 5

On a Windows 11 device that is already joined to Microsoft Entra ID, local administrator rights are not controlled on the device itself in the same way as a standalone PC. The account type (standard vs. administrator) is normally managed by your organization’s IT/admin through Microsoft Entra ID or device management, not directly upgraded from the Windows UI for a work account.

The provided context only documents how to:

• Join a device to Microsoft Entra ID and sign in with a work account.
• Verify that the device is Entra-joined using dsregcmd.exe /status.
• Configure a local user account as an administrator via Settings > Accounts > Other users → Change account type.

From the context, the only supported elevation path shown is for local accounts:

1. Open Settings on the Windows 11 device.
2. Go to Accounts > Other users.
3. Select the flyout for the account to change.
4. Select Change account type.
5. Choose Administrator, then OK.

This procedure applies to local user accounts listed under Other users. For a Microsoft Entra ID–joined device where the primary sign-in is a work account, elevation to local admin is typically done via organizational policy or device management tools, which are not detailed in the context.

If the work account does not appear under Other users, or if the option to change account type is not available, the elevation must be handled by the organization’s administrator outside of what is covered in the provided documentation.

---

References:

• Manage User Accounts in Windows
• Deploy Windows Enterprise licenses (windows-11)
• Getting started with Microsoft Copilot