Event banner
Event details
Best way to implement local admin accounts on azure ad devices? This will be with business premium licenses. And how would it work?
JaySimmons
Microsoft
MicrosoftMaryAnn have you looked at the Accounts CSP?
https://learn.microsoft.com/windows/client-management/mdm/accounts-csp
There are other approaches but that is the one that I would focus on first.
- I have looked into it, but I wasn't sure if there would be complications from using that method. I'm pretty new to AD so I was more so curious on industry best practices.
- JaySimmonsAccounts CSP is the primary method for AADJ-joined devices. I am not aware of any complications per se, other than the by-design fact that you need a Windows LAPS-like solution in order to actually set a password on such a local account before it can be enabled. I have also worked with some customers who prefer to "bake" their necessary local admin accounts (hopefully not more than one) into their base images.
- Thank you for that information, I'll definitely start on my research!