You have an Azure AD tenant adatum.com where 'Users may join devices to Azure AD' is set to User1 and 'Additional local administrators on Azure AD joined devices' is set to None. User1 joins Computer1 to adatum.com. Which users will be members of the local Administrators group on Computer1?
Choose an answer
Tap an option to check your answer.
Correct answer: User1 and User2 only.
Why this is the answer
When a user joins a device to Azure AD, that user is automatically added to the local Administrators group on the device. Additionally, the Azure AD Global Administrator role and the Azure AD Device Administrator role are also automatically added to the local Administrators group on all Azure AD-joined devices. Therefore, User1 (the joining user) and any user with the Global Administrator or Device Administrator role (represented here as User2) will be members of the local Administrators group. The "Additional local administrators on Azure AD joined devices" setting being "None" means no additional specific users or groups are granted administrative rights beyond these defaults.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed