How to Make an Existing Premium AAD User a Standard User or Local Admin via CMD in Azure AD Hybrid Environment

Make Existing Premium AAD User a Standard User and Local Admin in a Hybrid Azure AD Environment

In this article, we will discuss how to change an existing Premium Azure Active Directory (AAD) user to a Standard user and grant them Local Admin privileges in a Hybrid Azure AD environment. This process is essential for managing user access and permissions in a secure and efficient manner.

Prerequisites

Before we begin, it is assumed that you have a basic understanding of Azure AD, AAD Connect, and Hybrid Azure AD environments. Additionally, you should have an existing Premium AAD user account that you want to modify.

Changing AAD User License

To change an existing Premium AAD user to a Standard user, follow these steps:

1. Log in to the Azure portal using your Global Administrator account.
2. Navigate to Azure Active Directory > Users.
3. Search for the user you want to modify and click on their name to open their profile.
4. Under the Licenses section, click on All products.
5. Locate the Premium license assigned to the user and click on it.
6. In the Assign section, toggle the switch to Off.
7. Click Save to apply the changes.

Granting Local Admin Privileges

To grant Local Admin privileges to the user in the Hybrid Azure AD environment, follow these steps:

1. Connect to the Domain Controller (DC) using Remote Desktop Protocol (RDP).
2. Open the Command Prompt as an Administrator.
3. Run the following command to add the user to the Local Administrators group:

Replace <username> with the user's UPN (User Principal Name) or sAMAccountName.

In this article, we have discussed how to change an existing Premium AAD user to a Standard user and grant them Local Admin privileges in a Hybrid Azure AD environment. By following the steps outlined above, you can manage user access and permissions in a secure and efficient manner.

References

• Add users to Azure Active Directory
• Assign administrator roles in Azure Active Directory
• Add-LocalGroupMember