Hi Betsy,
When you set up a PC using a Microsoft 365 business account and choose "Work or School" during setup, the device typically joins Azure Active Directory (Azure AD). However, being a Global Admin in Microsoft 365 doesn’t automatically grant local admin rights on the device itself. That’s because Azure AD and local device permissions are managed separately unless configured through policies.
Here’s how you can resolve this:
- Check the device join status: Go to Settings > Accounts > Access work or school and click Info. If it says “Azure AD joined,” you’re on the right track.
- Sign in with the account that joined the device to Azure AD—that account is usually granted local admin rights by default.
- If your account didn’t join the device originally, you can:
- Use another admin account (if available) to add your user to the local Administrators group.
- Or, if you manage devices via Microsoft Endpoint Manager (Intune), you can push a policy to add your account or group to local admins.
- If you’re locked out of admin access entirely, you may need to reset the device and rejoin it using your account to ensure admin rights are applied.
If this answer helps, feel free to hit “Accept Answer” so others can benefit too 😊