Windows 10: Is there any way to filter admin user group to not become primary users for a PC in Intune?

Hi,We have an SCCM + Intune Co-management in place for our Windows workstations.We have some legacy steps in our workstation delivery process , which require our helpdesk team to logon to these computers for installing few components before handing them to our end users.Now we are facing an issue where our admin users will get registered as the primary users of the computers and it requires manual steps to get this changed.And while admin accounts are primary users, M365 suite installation can't be started from Intune by the real primary user of the device.Any tips/tricks available how to work

:)

 

Trouble creating Local admin users via Intune

We are trying to create a local admin user other than the auto pilot user in Intune. The way we have setup is our auto pilot user (Domain user account) is an admin user and then we are using CSP to create another local admin user. We are using hybrid mode enrollment.

We have a Device configuration profile with OMA URI as follows:

- OMA-URI: ./Device/Vendor/MSFT/Accounts/Users/localadmin/Password

Data Type: String

Value: *******

- OMA-URI: ./Device/Vendor/MSFT/Accounts/Users/localadmin/LocalUserGroup: 2

Data Type: Integer

Value: 2

Assignment : User Group

When it Works:

So far based on testing it works when the profile is assigned to the Dynamic device group which is created to perform auto pilot on intune machines for which the device hash is already imported, but in this process it fails to make the auto pilot user as an admin

When it doesn't work:

When the configuration profile is applied to user group, it fails to create the user, but then the auto pilot user is created properly with admin rights.

Variations tried:

Making the localadmin user as a non admin by changing the integer value to 1 and then first tried with dynamic device group assigned, which failed and also the user group which also failed.

Client machine Windows version: Windows 10 21H2

Would like to avoid the PowerShell script method if possible. Kindly let me know if you require any further details.

 

Intune User-driven upgrade issues

Hi Brandan,



Thank you for writing to Microsoft Community Forums.



I understand you are facing issues while testing Intune autopilot feature for user-drive profile. I suggest you to refer the article

Troubleshooting Windows Autopilot enrollment issues in Microsoft Intune and see if that helps.



For additional information, you can refer the article
Enroll Windows devices in Intune by using the Windows Autopilot.



If the issue persists, I suggest you to post your query in
TechNet forums, where we have a dedicated team with experts in Microsoft Intune to assist you with the appropriate troubleshooting steps.



Regards,

Nikhar Khare

Microsoft Community - Moderator

 

Trouble creating Local admin users via Intune

Thank you I have now moved my question to

Trouble creating Local admin users via Intune - Microsoft Q&A