Windows 10: Work Laptop Accounts - Administrator Rights

In a situation where an organisation does not have InTune device management, what is the best practice for setting up employee laptops where users do not have administrator rights in their day-to-day accounts?I was envisaging setting up every laptop under the same single generic Admin account, with admin rights, and then adding the employees as a Standard User on each device. However, if the employees then need to install software, how can we support this remotely without InTune?

:)

 

Weird account name and lost Administrator rights.


Well, I know what I would do.

Under Settings, Accounts, Family & other users, then under Other users, add someone else to this PC. Then click the link for "the person I want to add doesn't have an email address". Then click the link for "Add a user without a Microsoft account". Then enter a temporary user name like TempAdmin. When the account appears in the Other Users list, click on it. Click change account type. Make the temporary account an Administrator.

Log in as the temporary administrator account, and copy all the files you want to keep from both the Andrius folders under Users to the temporary account's folder. Then delete whatever Andrius users are listed under settings, accounts. Go back to the Users folders and delete any remaining Andrius folders in there. Reboot the computer, log in as the temporary administrator and recreate an Andrius account using the exact same steps you made the temporary account - you can convert it to a Microsoft account if you want later.

Then do the rest of the steps to copy all your files back and delete the temporary administrator account.

 

Health & Performance Report Not Available on 2 user accounts except the administrator's account in the laptop has Health Report

We appreciate your time responding back to us. At this point, we would suggest that you access the built-in Administrator account to and check if you would be able to perform a Health Check from it. Here are the steps on how to enable the built-in Administrator
Account:

• Right-click on the Start button.
• Select Command Prompt (Admin).
• Type the net user administrator /active:yes and hit
  Enter.

After completing these steps, you should see a message that you've done the command completed successfully. Sign out from your current user profile and you'll see the Administrator account as one of the choices.

Let us know if you would be able to perform a system health check on your account and we'll assist you with the next steps needed.

Once you're successful with performing a health check on the Administrator account, we would suggest that you disable it from your personal user profile by following these steps:

• Right-click on the Start button.
• Select Command Prompt (Admin).
• Type the net user administrator /active:no and hit Enter.

Let us know how it goes and we'll assist you further.

 

Administrator Rights

We suggest creating a new local user account and delete the previous account. Check the article below and follow the steps given.

Create a local user account in Windows 10

Follow the steps below to delete user account.

• Press Windows + X, select the Control Panel.
• Click User accounts.
• Click Manage other account.
• Enter administrator account password if prompted.
• Click the account which you want to delete.
• Click Delete the account.
• Restart PC.

Let us know how it goes.