Windows Server Summit 2024
Mar 26 2024 08:00 AM - Mar 28 2024 04:30 PM (PDT)
Microsoft Tech Community

The same user on the same domain, but different permissions

Not applicable

How can a user have admin rights if he logs in via his user domain on PC A and no admin rights if he does the same on a new PC?


I am by far not an Windows Server and Active Directory expert, therefore I hope you can help me verifiy if this user really has admin rights and how I can change his permissions for both devices.

1 Reply

Hi Miodrag.

It is possible that the domain user account was added to the local Administrators group on PC A that give the user Admin rights and permission on that PC. If the same was not done on the new PC then the user would have standard user rights and permissions.

If the PC is Azure Active directory joined, the user that joins the PC to AAD is granted admin privileges on that PC. If the same user logs into another PC that was joined to AAD by a different user then the ID would not have Admin privileges on that PC.

I hope that helps!

Ed Gallagher