Local Admin Rights for Azure AD Joined Devices

%3CLINGO-SUB%20id%3D%22lingo-sub-389601%22%20slang%3D%22en-US%22%3ELocal%20Admin%20Rights%20for%20Azure%20AD%20Joined%20Devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-389601%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20a%20group%20of%20users%20that%20need%20to%20install%20oracle18c%20on%20their%20machines%20but%20the%20exe%20is%20asking%20for%20local%20admin%20rights%20in%20order%20to%20install.%20I%20don't%20want%20to%20unjoin%20the%20machines%20from%20our%20azure%20AD%20domain.%20What%20can%20i%20do%20to%20get%20this%20app%20installed%20on%20these%20machines%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-389601%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-389631%22%20slang%3D%22en-US%22%3ERe%3A%20Local%20Admin%20Rights%20for%20Azure%20AD%20Joined%20Devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-389631%22%20slang%3D%22en-US%22%3E%3CP%3EIt's%20available%20in%20my%20tenant.%20But%20you%20probably%20don't%20want%20to%20use%20that%20anyway%2C%20as%20it's%20a%20preset%20membership%2C%20across%20all%20devices.%20Simply%20use%20the%20manual%20elevation%20method%20instead.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-389620%22%20slang%3D%22en-US%22%3ERe%3A%20Local%20Admin%20Rights%20for%20Azure%20AD%20Joined%20Devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-389620%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3EI%20looked%20at%20that.%20But%20the%20option%20to%20add%20%22%3CSTRONG%3EAdditional%20local%20administrators%20on%20Azure%20AD%20joined%20devices%22%20isn't%20there.%26nbsp%3B%20%3C%2FSTRONG%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-389616%22%20slang%3D%22en-US%22%3ERe%3A%20Local%20Admin%20Rights%20for%20Azure%20AD%20Joined%20Devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-389616%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20either%20pre-provision%20additional%20admin%20accounts%20when%20initially%20joining%20the%20device%2C%20or%20elevate%20them%20later.%20Read%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevices%2Fassign-local-admin%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevices%2Fassign-local-admin%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

I have a group of users that need to install oracle18c on their machines but the exe is asking for local admin rights in order to install. I don't want to unjoin the machines from our azure AD domain. What can i do to get this app installed on these machines?

3 Replies
Highlighted

You can either pre-provision additional admin accounts when initially joining the device, or elevate them later. Read here: https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

Highlighted

@Vasil MichevI looked at that. But the option to add "Additional local administrators on Azure AD joined devices" isn't there. 

Highlighted

It's available in my tenant. But you probably don't want to use that anyway, as it's a preset membership, across all devices. Simply use the manual elevation method instead.