By default without autopilot, all users are enrolled with admin rights. This is not assigned by me, it just happens. Checking their assigned roles shows absolutely nothing (so no admin roles are attached). Where can I find the page that shows them having admin rights?
I just enrolled a pc via autopilot with standard user selected and now it forces an admin account to sign in when an app requires elevation. I was wondering if there was a way to do it besides through autopilot. Like demoting an existing account to a standard user. I need help for the opposite too. How would I upgrade that user back to a admin account like all the other default accounts? I don't want to assign them a administrator role in the "assigned roles" setting since non of the other default accounts have an admin roles there.
The thread explains how to upgrade the account locally to a local admin. Is there a way to do it remotely through azure or intune/MEM? And the account was upgraded to a local admin account when it previously had domain admin by default. How can I give it back domain admin privs without assigning the role?