Forum Discussion
Intune
Dear All,
We have 2000 endpoints which do not have connected to any of the domain. All the 2000 endpoints laptops and desktops are using directly using local account which is having administrator rights.
In order to manage all the endpoints using standard user rights, only way I know through AutoPilot deploy the standard profile.
But, its little big task to complete.
So for testing, I have joined some of the endpoints joined to Azure AD join manually through Access work or school. Now few machines joined Azure joined.
But all the machines already the endpoints users are created Local admin account using different names, and its not standard name called administrator..
Issue:
Now how can i disable or remove the administrator accounts which is created by users with different local account names????
1 Reply
You can use a combination of Powershell and OMA URI top accomplish this.
For Powershell you can use the following and build a script from it: Remove–LocalGroupMember –Group “Administrators”. It can be tricky to get the right members but there are a lot of resources out there.
You can use this resource to create a local admin on the devices: https://www.prajwaldesai.com/create-a-local-admin-account-using-intune/
