Granting Administrator Rights to Additional Users

Windows device administrators can grant additional users administrative access to individual computers. This allows them to install and update programs for departmental use, as well as enable other functions that may be disabled for standard accounts. By default, all accounts except for the primary user will be granted standard access.

Important things to note

• Most workflows on a Windows computer do not require administrator privileges. Only grant access if necessary.

• On shared-use computers, Administrator privileges are automatically granted to the first user to sign in. This user is also listed as the primary user of the computer.

• Administrator privileges are revoked after erasing a device and will need to be granted again by the new primary user.

• Administrator privileges can only be delegated to an individual user who has an active UConn email. Shared/kiosk/generic accounts are not supported on university computers.

Granting access via Windows Settings app

This process must be completed while signed in as the administrator.

1. Open Windows Settings.

2. Navigate to Accounts → Other Users.

3. Under Work or school users, select Add account.

4. Enter the additional user’s UConn email address and change the account type to Administrator.

5. Click Add to grant the user administrator privileges.

Granting access via command line

This process can be completed as a terminal command when running an elevated (Run as Administrator) terminal session or by using the BeyondTrust jump client as an admin (IT professionals only).

• net localgroup administrators /add AzureAD\USEREMAIL@uconn.edu

• If the above command fails, try: net localgroup administrators /add AzureAD\USERNETID@ad.uconn.edu