Forum Discussion
Solved
How to enable a user to bypass any UAC pop ups
Hi all, How do I enable a specific user to bypass UAC? When using intune (Cloud only) Please help!
The user isn’t an admin but the user can become an admin if needed but which sort of admin can bypass UAC?
The app they are trying to use requires run as admin to open
The app they are trying to use requires run as admin to open
Not sure what the best solution would be, but a shortcut to the program with the Run as administrator checkbox isn't enough? Are you going to make the user admin on it's machine for this?
- For some reason this app only allows the person who has installed the app open it. As I installed manually as I was struggling deploying through intune.
Yes I was thinking thats best but not sure how to make the user admin as I user AAD only log ins. So is there away too make the user an admin for the device via the intune portal?Rudy_Ooms_MVP Harm_Veenstra Thank you both!
I used the CSP:
<GroupConfiguration>
<accessgroup desc = "">
<group action = ""/>
<add member = ""/>
<remove member = ""/>
</accessgroup>
</GroupConfiguration>
- Global Admins and Device Administrators are put in the Administrators group automatically on every device, but you don't want to make that user admin using the Device Administrators group on every machine.
You can add a Azure AD user to the local admin group on one pc by using:
net localgroup administrators /add "AzureAD\UserUpn"
https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin
or by using this
https://www.petervanderwoude.nl/post/managing-local-administrators-via-windows-10-mdm/
Create a config for one or more users for a set of computers (or all devices), replace the two SID's with the ones that are already present in de local administrators group (Those are the SID's of the Global Admin and Device Administrator group)