Windows 10: Unable to add local admin account

Periodically I acquire computers from ex-employees that only have themselves as local Users.
Even though I'm in the Administrators Group as a domain admin, I don't have permission to add anyone to local Users.
I need to clean these up for redeployment and often wind up formatting/reinstalling.
Surely there's a simpler, faster way to achieve this?

:)

 

Change default user Windows 10 Build 1709

Using an admin account is not recommended because no UAC Controls apply on it.

On the default account, create a local admin account:

https://www.tenforums.com/tutorials/5440-add-lo...

 

Merge local child account with Microsoft account?

I tried this but what I'm finding is that local accounts that were converted from Win 7 to 10 do not allow the 'Sign in with a MS account' option.

The link is there, but when selected nothing happens. I have tried changing the accounts from Users to Admin, but still no luck.

The local admin account that was converted cannot even add new accounts. In the end I had to use win + R + control userpasswords2 to add a new Admin which I associated with my MS Account. This admin can add new accounts, but still the existing local user
accounts cannot be converted.

Is there a way to either 1) convert a local account to use an MS account (from the admin account or registry edit, I'm happy either way), or 2) merge a new MS account based login with the local user account?

The local accounts have a lot of work saved and apps set up that I don't want them to loose.

 

Welcome to the forum if you add domain admin to local admin group while on the domain it should work. Your domain is setup wrong DC admins must control local admin or a user can lock you out

 

Thanks! That's what I thought.
I am a member of the domain admin group that is in the local admin group yet I can't even add myself as an admin or local User.
We've been locked out of ex-employee machines before.
Where do I look in DC for the local admin control setting that's obviously wrong?
I won't have permission to change it, but I can point it out to the people that do.