Local Admin Rights for Azure AD Joined Devices

%3CLINGO-SUB%20id%3D%22lingo-sub-389601%22%20slang%3D%22en-US%22%3ELocal%20Admin%20Rights%20for%20Azure%20AD%20Joined%20Devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-389601%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20a%20group%20of%20users%20that%20need%20to%20install%20oracle18c%20on%20their%20machines%20but%20the%20exe%20is%20asking%20for%20local%20admin%20rights%20in%20order%20to%20install.%20I%20don't%20want%20to%20unjoin%20the%20machines%20from%20our%20azure%20AD%20domain.%20What%20can%20i%20do%20to%20get%20this%20app%20installed%20on%20these%20machines%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-389601%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-389631%22%20slang%3D%22en-US%22%3ERe%3A%20Local%20Admin%20Rights%20for%20Azure%20AD%20Joined%20Devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-389631%22%20slang%3D%22en-US%22%3E%3CP%3EIt's%20available%20in%20my%20tenant.%20But%20you%20probably%20don't%20want%20to%20use%20that%20anyway%2C%20as%20it's%20a%20preset%20membership%2C%20across%20all%20devices.%20Simply%20use%20the%20manual%20elevation%20method%20instead.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-389620%22%20slang%3D%22en-US%22%3ERe%3A%20Local%20Admin%20Rights%20for%20Azure%20AD%20Joined%20Devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-389620%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3EI%20looked%20at%20that.%20But%20the%20option%20to%20add%20%22%3CSTRONG%3EAdditional%20local%20administrators%20on%20Azure%20AD%20joined%20devices%22%20isn't%20there.%26nbsp%3B%20%3C%2FSTRONG%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-389616%22%20slang%3D%22en-US%22%3ERe%3A%20Local%20Admin%20Rights%20for%20Azure%20AD%20Joined%20Devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-389616%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20either%20pre-provision%20additional%20admin%20accounts%20when%20initially%20joining%20the%20device%2C%20or%20elevate%20them%20later.%20Read%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevices%2Fassign-local-admin%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevices%2Fassign-local-admin%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

I have a group of users that need to install oracle18c on their machines but the exe is asking for local admin rights in order to install. I don't want to unjoin the machines from our azure AD domain. What can i do to get this app installed on these machines?

3 Replies

You can either pre-provision additional admin accounts when initially joining the device, or elevate them later. Read here: https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

@Vasil MichevI looked at that. But the option to add "Additional local administrators on Azure AD joined devices" isn't there. 

It's available in my tenant. But you probably don't want to use that anyway, as it's a preset membership, across all devices. Simply use the manual elevation method instead.