Unable to Use Local Admin rights on Windows 10 Machine

Question

Hi,&nbsp;We have a Windows 10 Machine as Azure AD Joined.&nbsp;I have assigned the Helpdesk Team the Device Administrator role from AAD -&gt; Devices -&gt; Device Settings -&gt; Additional local administrators, however, the helpdesk team is not able to use the admin privileges. Kindly suggest?

moe_kinani · Answer

It might timing issue, when did you make the change? Do you have Azure AD premium tenant?Here is a good guide- https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-adminMoe

ekg88 · Answer

Hi Moe,Its not happening with a single user its happening with all the staff members who has Device Admin role.Its been few days the role has been assigned so it cannot be related to the timing.

ru · Answer

What level of Azure AD Premium licensing do you have?
How are you testing whether or not the administrative rights are available?
Are there any errors when administrators authenticate during something like UAC prompts?

ekg88 · Answer

Hello Ru,I am having Azure P1 license and we are trying to open device manager or any application which requires elevated rights. We get the UAC prompt but as soon as we enter the admin credentials it says you dont have requited rights to perform this task. I also checked there are two SID added in Administrators group when you Azure AD join machine so i suppose its one for GA and other for device Admin.

Forum Discussion

Unable to Use Local Admin rights on Windows 10 Machine

Resources