Windows 10: Azure Local 23H2 Upgrade Validation Error: Local Admin Group Membership Issue

Hello everyone,I'm encountering an issue during the validation phase of the Solution Upgrade for Azure Local 23H2, and I’m hoping someone here has come across a similar scenario.Environment details:We have four Dell AX-750 servers that make up our Azure Local clusterThe nodes are on version 23H2 already but we have not completed the Solution Upgrade yetDuring the validation process, we receive the following error:Exception Type 'InvokeCloudUpgradeEnvironmentChecker' of Role 'DeploymentService' raised an exception: > User is not part of the Local Administrator Group. Please add this user to

:)

 

Issue with Removing Local Admin Rights via Intune for Group Members

Hello,,

I'm experiencing a challenge with Intune's "Local user group membership" policy on Windows 11. I've been attempting to remove local admin rights from devices, and the policy works as expected when I add individual users. However, when I try to apply the policy to a group, it doesn't seem to be effective.

Here's what I've done so far:

• Accessed the Intune admin center.
  
• Navigated to "Local user group membership" under policies.
  
• Successfully removed local admin rights for individual accounts.
  

The issue arises when I attempt to remove admin rights for a group of users. Despite adding the group in the policy, the rights remain unchanged on the devices.

Is there a specific procedure or consideration for applying this policy to groups that I might be missing? Any insights or guidance on how to properly remove local admin rights from devices using Intune for groups would be greatly appreciated.

Thank you for your assistance!

 

Convert online Microsoft Azure account to local account?

Unfortunately, you cannot switch an Azure AD account to a local or Microsoft account. You need to create a new user account first, make it an admin account, then disconnect from your organizational account, restart and sign in to new local account.

All software remains installed and intact but all user specific customizations and settings are lost, new local user starting from scratch with default settings.

The whole process step by step:

1.) Copy your personal data (documents, images etc.) from current Azure AD user profile folder to respective folders in C:\Users\Public

2.) In Settings > Accounts > Other people, add a new local user (see Option One in this tutorial) and change it's account type to Administrator (tutorial)

3.) Check that everything is correct, that you will see your Azure AD account under Work or school users (yellow highlight), and your new local admin account under Other people (blue highlight):





4.) Select Access work or school on left pane, select the connected Azure AD domain, click Disconnect:





5.) Click Yes:





6.) Click Disconnect:





7.) Enter the username and password for your new local admin account, click OK:





8.) Click Restart now:





9.) When back on desktop with your new local admin account, move personal data from Public folder and its subfolders you backed up in step 1 above to respective subfolders on new user profile folder. If the old Azure AD user profile folder is still present in Users folder, it can be deleted now.

That's it.

 

Show Local users and Groups

Hey Brink, I was just looking at groups in netplwiz today and I noticed that my user account is just in the Admin group now, it used to be in Users and Admin. I have home, so I can't change it. I don't know how it changed. I guess there's nothing I can do about it. Will it be a problem?
I'm tempted to downgrade to my 8.1 pro and go to 10 pro.