Forum Discussion
Managing Local Administrators on endoints using Intune
Hello, I need to frequently add and remove users from Administrators group on specific computers. I'm creating a policy (under Account Protection) which adds users to this group and I'm assigning th...
If the device is Entra joined, you can try adding the "Microsoft Entra Joined Device Local Administrator" role to the user. MS updated this role to have expiration date option which is nice so you do not have to remember to remove it. I think this only works if the device is assigned to the same user.
- Thanks! Can I use it to grant local admin to a specific user on a specific computer? (I have multiple users working and sharing multiple computers each)
