Home

How to restrict admin rights on Windows 10 Azure AD/Office 365 joined machine?

%3CLINGO-SUB%20id%3D%22lingo-sub-174189%22%20slang%3D%22en-US%22%3EHow%20to%20restrict%20admin%20rights%20on%20Windows%2010%20Azure%20AD%2FOffice%20365%20joined%20machine%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-174189%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%20I%20just%20joined%20a%20new%20W10%20Pro%20laptop%20to%20Azure%20AD%20by%20logging%20into%20the%20laptop%20with%20my%20Office%20365%20email%20address.%20It%20asked%20me%20to%20setup%20a%20pin%20for%20Windows%2010%20Hello.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHowever%20I'm%20automatically%20an%20admin%20and%20I%20wanted%20to%20know%20how%20can%20I%20remove%20myself%20as%20an%20admin.%20I%20tried%20setting%20up%20a%20local%20account%20as%20admin%20and%20then%20logged%20in%20as%20that%20and%20removed%20my%20AzureAD%20user%20account%20from%20the%20%22administrators%22%20group%20in%20%22local%20users%20and%20groups%22%20but%20still%20have%20admin%20rights%20when%20I%20log%20in%20under%20my%26nbsp%3Boffice%20365%20account.%3C%2FP%3E%0A%3CP%3EI%20also%20went%20into%20Windows%2010%20account%20settings%20and%20set%20my%20account%20type%20to%20standard%20(signed%20out%20and%20back%20in)%20and%20I%20can%20still%20install%20apps%20and%20open%20cmd%20as%20admin%20with%20no%20admin%20prompt.%20Anyone%20know%20how%20I%20can%26nbsp%3Bremove%20admin%20rights%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%3C%2FP%3E%0A%3CP%3EGerry%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-174189%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Ewindows%2010%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Hello%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-174247%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20restrict%20admin%20rights%20on%20Windows%2010%20Azure%20AD%2FOffice%20365%20joined%20machine%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-174247%22%20slang%3D%22en-US%22%3E%3CP%3EHave%20a%20look%20at%20this%20article%3A%26nbsp%3B%3CA%20href%3D%22http%3A%2F%2Fwww.rebeladmin.com%2F2017%2F12%2Fstep-step-guide-add-additional-local-administrators-azure-ad-joined-devices%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.rebeladmin.com%2F2017%2F12%2Fstep-step-guide-add-additional-local-administrators-azure-ad-joine...%3C%2FA%3E%3C%2FP%3E%0A%3CP%3EDoes%20it%20help%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Gerry Morley
Occasional Contributor

Hi all, I just joined a new W10 Pro laptop to Azure AD by logging into the laptop with my Office 365 email address. It asked me to setup a pin for Windows 10 Hello. 

 

However I'm automatically an admin and I wanted to know how can I remove myself as an admin. I tried setting up a local account as admin and then logged in as that and removed my AzureAD user account from the "administrators" group in "local users and groups" but still have admin rights when I log in under my office 365 account.

I also went into Windows 10 account settings and set my account type to standard (signed out and back in) and I can still install apps and open cmd as admin with no admin prompt. Anyone know how I can remove admin rights?

 

Thanks

Gerry

1 Reply
Related Conversations
Teams - Chat History
David Gorman in Microsoft Teams on
8 Replies
Remove MS shifts schedule from a Channel in MS Teams
John Crook in Microsoft Teams on
17 Replies
Move Channels between Teams
HerculesConsen in Microsoft Teams on
13 Replies
Configuring more than one account in MS-Teams
Biju_Radhakrishnan in Microsoft Teams on
15 Replies
Getting Started - Creating a team accross two tenants
bw-ipim in Microsoft Teams on
40 Replies