Last year we explored 4 ways to add administrator permissions to AAD joined devices. Now Microsoft has finally made this process a lot easier. Let me show you it’s features!

Click to go to the easy method instantly.

The complicated methods

The methods described in last year’s article are still valid but are a bit more involved or complicated. But if you want you can still make use of them. Click here to check out these 4 methods.

  • Join a new Windows 10 device with Azure AD during a first run
  • Global administrator accounts in Office 365
  • Manually add Azure AD users to your local “Administrators” group
  • Add users to the local “Administrators” group on all Azure AD joined devices

Finally an easy way!

Let’s check out that noob-friendly clicky-clicky way.


First, we need a computer that is already Azure-AD joined. You can find the most up-to-date approach on the Microsoft Docs website.

We also need a valid Azure AD username. Otherwise, we will be greeted with a nice descriptive error message.

That work or school account couldn’t be found. Check the account name an try again.

Steps to take – Add a work or school user

  • Go to your Start menu, click Settings and then Accounts.
  • Click Other users.
  • Now, we have 2 main divisions, Work or school users and Other users. Click the spanking new Add a work or school user.
Add a work or school user
  • Now, we can see a new dialog screen. Let’s enter a valid User account and select the Account type.
Account info
Enter the account info for the person who'll be using this PC.

If all went according to plan, we should see a new AzureAD\username appear in our list.

Other users
Work or school users
Add a work or school user

Well, that was simple.

All we need now is a point-and-click method to perform the same action using Microsoft Intune! Let’s pray together.