How do I add administrator access to a user profile on a laptop configured for work using microsoft business license?

Hello Graham,

If the laptop is Azure AD-joined (rather than domain-joined or using a local account), then by default, only the user who joined the device to Azure AD is granted local administrator rights. Simply assigning admin rights to your business profile in Microsoft 365 doesn’t automatically replicate to the device unless explicitly configured.

Here are a few steps to help resolve this:

Check the device's join status: Go to Settings > Accounts > Access work or school and confirm whether it's Azure AD-joined or Hybrid AD-joined.

Add your account as a local admin: If you're managing via Endpoint Manager (Intune), you can push a policy that adds specific users or groups to the local administrators group.

Use the built-in Administrator account: If local profiles are allowed, you can enable the built-in Administrator account via command line (net user administrator /active:yes) and use it to install software.

Local account creation: If you're trying to create a local admin account manually and the option is missing, check whether the device is in S mode or has restrictions via group policy or Intune.

If this helps, feel free to hit “Accept Answer” so others can benefit too 😊