Windows 10: Trouble creating Local admin users via Intune

We are trying to create a local admin user other than the auto pilot user in Intune. The way we have setup is our auto pilot user Domain user account is an admin user and then we are using CSP to create another local admin user. We are using hybrid mode enrollment.We have a Device configuration profile with OMA URI as follows:- OMA-URI: ./Device/Vendor/MSFT/Accounts/Users/localadmin/Password Data Type: String Value: *******- OMA-URI: ./Device/Vendor/MSFT/Accounts/Users/localadmin/LocalUserGroup: 2 Data Type: Integer Value: 2Assignment : User GroupWhen it Works:So far based on testing

:)

 

regarding local admin user account in windows 10

Hi Guys,

I have prepared a powershell script to create local admin user account and I have planned to push it through Intune. There are totally 700 pc's in my Organisation.

I want to know is there any option to have a local user admin account which should be working even when the PC is out of Organisation Domain.

Below is the script that I have prepared to create local admin account through Intune:

$Username = "test"

$Password = "Password12345"

$Description = "Local Admin Account"

$group = "Administrators"

$adsi = [ADSI]"WinNT://$env:COMPUTERNAME"

$existing = $adsi.Children | where {$_.SchemaClassName -eq 'user' -and $_.Name -eq $Username }

if ($existing -eq $null) {

Write-Host "Creating new local user $Username."

& NET USER $Username $Password /add /y /expires:never

& net user $USERNAME /comment:"Local Admin Account”

& net user $USERNAME /fullname:"$Username"

Write-Host "Adding local user $Username to $group."

& NET LOCALGROUP $group $Username /add



}else {

Write-Host "Setting password for existing local user $Username."

$existing.SetPassword($Password)

}

Write-Host "Ensuring password for $Username never expires."

& WMIC USERACCOUNT WHERE "Name='$Username'" SET PasswordExpires=FALSE

 

What's new in Microsoft Intune


What's new in Microsoft Intune

Source: https://docs.microsoft.com/en-us/int...ntune#may-2016

 

I can't create a New User Profile that is Not Corrupt! Please Help!

Hi,

I realize the inconvenience you are facing in creating the new user profile on your device. Do not worry we will help you with this issue.

As a work around, I suggest you to enable the built-in administrator account, log-in with the admin account to create a new user profile and check if you are able to check. This will let us know if the issue persists with user account or the operating system.

Step 1: Follow the steps to enable Built-in admin account.

Enable Built-in administrator.

• Press Windows + X key together on your desktop screen.
• Click on Command Prompt (admin) to open
  Command Prompt.
• Type the following command and hit Enter:

• net user administrator /active: yes (Check for the spaces)

4. Now log off from the current user and try to login to the administrator account that is enabled.　　

Note: Please follow the same steps and type net user administrator /active: no to disable admin account after the troubleshooting is done.　

Step 2: Refer to the articles to create a test user account/ Microsoft account respectively.

For Local account: Create a local user account in Windows 10

For Microsoft account: Help with Microsoft account


Hope it helps. Get back to us with an updated status of creating new user profile for further assistance.

Thank you.