Forum Discussion
Solved
How to enable a user to bypass any UAC pop ups
Hi all, How do I enable a specific user to bypass UAC? When using intune (Cloud only) Please help!
For some reason this app only allows the person who has installed the app open it. As I installed manually as I was struggling deploying through intune.
Yes I was thinking thats best but not sure how to make the user admin as I user AAD only log ins. So is there away too make the user an admin for the device via the intune portal?
Yes I was thinking thats best but not sure how to make the user admin as I user AAD only log ins. So is there away too make the user an admin for the device via the intune portal?
Global Admins and Device Administrators are put in the Administrators group automatically on every device, but you don't want to make that user admin using the Device Administrators group on every machine.
You can add a Azure AD user to the local admin group on one pc by using:
net localgroup administrators /add "AzureAD\UserUpn"
https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin
or by using this
https://www.petervanderwoude.nl/post/managing-local-administrators-via-windows-10-mdm/
Create a config for one or more users for a set of computers (or all devices), replace the two SID's with the ones that are already present in de local administrators group (Those are the SID's of the Global Admin and Device Administrator group)
You can add a Azure AD user to the local admin group on one pc by using:
net localgroup administrators /add "AzureAD\UserUpn"
https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin
or by using this
https://www.petervanderwoude.nl/post/managing-local-administrators-via-windows-10-mdm/
Create a config for one or more users for a set of computers (or all devices), replace the two SID's with the ones that are already present in de local administrators group (Those are the SID's of the Global Admin and Device Administrator group)