Body
By default only the person who joined the computer to Entra is granted local administrator rights. Adding someone as a 'primary user' in Intune admin portal does not grant them local admin access on the workstation. To add someone as local administrator on the machine that is joined to Entra, follow these steps:
- Ask the user to sign in to AAD, if they have never done it on this computer (this creates their local Windows profile).
- Sign in with local admin account.
- Launch the Command Prompt as administrator and type in the following command replacing "{uwinid}" with the actual UWin ID of the user:
net localgroup Administrators UWINAD\{uwinid} /add