Add an Azure AD account to local administrators group on Windows 10 machine

Add an Azure AD account to a local administrators group on a Windows 10 machine.

John Savill

December 23, 2016

1 Min Read
Add an Azure AD account to local administrators group on Windows 10 machine

Q. How can I add an Azure AD user to a local group on an Azure AD joined Windows 10 machine?

A. When a Windows 10 machine is Azure AD joined then Azure AD accounts can logon to the box however normal dialogs cannot list the members of the Azure AD instance which means you cannot easily add Azure AD users to a local group, for example administrators. The solution is a multi-part process

  1. Logon to the machine as the user you wish to make a local administrator (or other group)

  2. Logout and login as a local administrator (the first Azure AD user who logged on during join was made the local administrator)

  3. From the command line use:
    net localgroup

For example:

net localgroup administrators savilltechbond /add

To grant file system access to Azure AD accounts I would create a local group with the users in then grant that group access to the file system resources.

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like