Windows 10: How to: Add AzureAD user as local admin

After joining a computer to AzureAD you will login with a user and will be automatically added as a local admin. The trouble is when logging with other users. These users will automatically set as users to the computer. From the Computer Management Console there is no way to add an AzureAD as when you click on Add and Locations, there is no location for the AzureAD. If you look at the current AAD user in the Computer Management and Local Users and Groups you will find the current user as AZUREAD\noel.pulis.

Luckily there is a way to add an additional AzureAD user as a local admin.

– Open CMD (Command Prompt) as Admin
– Type NET Localgroup Administrators AzureAD\additionaluser



Once this is ready, open the Local Users and Groups and you will find the AzureAD user part of the local Administrators Group.

(240)

read more...

 

Error code 0xc0090016

Hello Jason,

the problem is the PIN. Face recognition, fingerprints and others depends on PIN.

This failure happens after hardware has replaced or you recovered your windows 10 from backup/image or s.th. like this. And it seems only happen with AzureAD accounts.

The solution is to disconnect then re-connect
your AzureAD account. But be aware doing that. You need another local administrator user to ensure to login to your computer. Otherwise, you may loose access to you data after disconnecting your account.

Preparatory Work

Please, always create a local user with administrator rights before disconnecting.

• Settings > Accounts > Other People > Add someone else to this PC
• select "I don't have this persons's sign-in information"
• select "Add a user without a Microsoft Account" and create the user (e.g. admin)
• then click the account > "Change account type" > Account type "Administrator" > OK

There are two options to integrate an AzureAD account. Either as (A) "local user connected to AzureAD" or you login directly using the (B) "AzureAD account".

How to find out which user profile you are using:

open power shell. (win-x > Windows Powershell)

PS:> get-item env:U*

Name Value

---- -----

USERPROFILE C:\Users\***

USERNAME ***

USERDOMAIN_ROAMINGPROFILE AzureAD

USERDOMAIN AzureAD

If USERDOMAIN is AzureAD, then you login directly with your AzureAD account. Continue with (B).

(A) You have a local user that is connected to AzureAD

• Settings > Accounts > Access work or school
• Disconnect all accounts
  • Disconnect > confirm "Yes" > Disconnect
  • Enter your local admin user in dialog
• Restart your computer
  
• Login with your local user account
• Then connect all your work or school accounts again.
  • Settings > Accounts > Access work or school
  • Connect > klick "Join this device to Azure Active Directory"
  • Enter AzureAD-Mail/Password > Sign in > Join > Done
• Add your PIN (Sign-in options)
• Configure additional sign-in options.

(B) You use your AzureAD account to login to your computer

• Prerequisites: be sure if your phone is available to receive verification code by SMS or your preferred media.
  
• Login with your AzureAD account
  • Settings > Accounts > Access work or school
  • Disconnect all accounts (perform step 2 in (A))
  • Restart your computer
    
• Note: Be sure you are connected to internet! (use lower-right network connection icon)
• Login with your local admin user.
  • Assign a AzureAD user to your local admin user: Perform step 5 in (A)
    
    (This process integrates your computer as AD client)
  • Sign-out
    
• select "Other user" > enter your AzureAD user (Mail address) and password
• Now, you should be asked to set up your PIN (you will be asked to enter verification code)
• Completed! Next, setup your additional sign-in options.

Kind Regards.

 

unable to login with AzureAD account after creating a local account on Windows 10

I was able to login with my work (AzureAD) account with no problem but after I created a local account and logged in with it, the work account is not visible anymore on login screen. If I try to login with "<user>@<domain>" it says wrong password.

After login with the local account, I can go to Settings -> Accounts -> Access work or school and it says that I'm still connected with to AzureAD with <user>@<domain>

 

Local administrator windows 10 user and folder name change (full change)

Hi Shaaddi,

Have you made sure that the account currently logged-in to has Administrator privileges? You can verify this by following these steps:

• Press Windows key + I on your keyboard and click Accounts.
• Click Your info on the left pane.
• Under your account picture, you can see if the account is a Local Admin.

If the account is not an Admin account, we suggest making one and try to transfer the files from there. Here's an
article for a guide on how to create a local user
or admin account in Windows 10.

Update us if the issue is resolved.