how can i change the user account type created on device from admin to local user on joined devices from intune ?

Sanaa Al-Tamimi 50

how can i change the user account type created on devices on joined devices from Intune ?

Forex: i want to change a type of account from device that joined on Intune from administrator to local user ( FROM INTUNE ) . Please can anyone help me in this ?

abhishek mishra 0 Reputation points

2024-09-17T17:45:25.45+00:00

Endpoint Security > Account Protection > Create Policy > Windows (Platform) > Local user group membership (Profile) > Select User & Remove Option in the configuration settings > Apply it to all devices and users

After a restart, it should work

1 answer

ZhoumingDuan-MSFT 12,580 Reputation points Microsoft Vendor

2024-03-18T02:37:22.05+00:00

@Sanaa Al-Tamimi, Thanks for posting in Q&A.

From your description, I know you want to change the user account type via Intune.

Based on my research, there is no related feature in Intune can achieve this, however, you can manually remove the user from local administrator group, then the user will be a standard user and you can change the account type to the standard user, or you can create a new user account without adding the user to local administrator group, then you can change the user account type.

Location: Computer Management > Local Users and Groups > Groups > Administrators and remove it from the administrator group.

Hope above information can help you.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
Sanaa Al-Tamimi 50 Reputation points

2024-03-18T08:19:44.06+00:00

Thank you , but i believe there is a way to do it at least by PowerShell script.

ZhoumingDuan-MSFT 12,580 Reputation points Microsoft Vendor

2024-03-18T08:47:51.4566667+00:00

@Sanaa Al-Tamimi, Thanks for your sharing.

Based on my researching, we can create a PowerShell script to remove the user from the local administrators group.

Here are the steps you can refer.

1.Create a .ps1 file with the below content.

net localgroup administrators "user" /delete. Replace "user" with the username of the account you want to change.

2.Upload it into Intune

3.Deploy it via Intune as configured below.

Note: it is suggested that you test the script on one device, and if it can work, then you can upload it into Intune.

Hope this can help you.

Sanaa Al-Tamimi 50 Reputation points

2024-03-18T08:59:24.38+00:00

after the code is running and the user deleted from admin group , the user can sign in normally ?

Sanaa Al-Tamimi 50 Reputation points

2024-03-18T09:00:24.2766667+00:00

how can i apply it on all users by the script ?

ZhoumingDuan-MSFT 12,580 Reputation points Microsoft Vendor

2024-03-19T02:16:27.9766667+00:00

@Sanaa Al-Tamimi, Thanks for your update.

When the user is removed from the administrators group, it becomes a local standard user, but it can still log in normally.

And if you want to remove more than one user, you can duplicate the code and replace the name with the name of the user you want to remove from the administrators group.

ZhoumingDuan-MSFT 12,580 Reputation points Microsoft Vendor

2024-03-21T07:08:48.6733333+00:00

@Sanaa Al-Tamimi, Hope things are going well.

If there's any update, feel free to let us know.

ZhoumingDuan-MSFT 12,580 Reputation points Microsoft Vendor

2024-04-02T02:54:48.85+00:00

@Sanaa Al-Tamimi, Hope you have a nice day.

If the answer is helpful, please click "Accept Answer" and kindly upvote it to help others with the same problem as soon as possible.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

how can i change the user account type created on device from admin to local user on joined devices from intune ?

1 answer

Your answer