Can anyone help with this F*** up??

redzerdrog

Ok I recently set up a very small business, bought a Microsoft 365 Business account and a domain name. I am the only user and use the following example admin@businessname.com.

Bought a new laptop and set it up using the Business email account however seem to have made a balls of it as Windows won't recognise me as the administrator and won't allow be to download apps ect

What are my options?

smuggler.ie

Hmm… we love F***** M$ and Win11…

You still global admin on your O365 portal/AAD, right?
not sure if you can elevate your account into local admins - need to look it up (some one might reply with info)

Backup your data from laptop, if any(OD would do or else to external storage)

Fresh install Win11 on laptop/reset to factory(might not be able as you not admin)
During initial setup( DO NOT connect to internet/network ) :
on Pro edition, before connecting to network/internet - "join to domain instead"(i believe M$ gave this option lately on Pro) - » create local user with <username> and pass (this will be local admin by default)
Edit:
Just completed 6 setups today - even Pro edition 24H2 does not allow create local admin without fiddling described below

on Pro or Home edition, before connecting to network/internet - SHIFT+F10 (SHIFT+Fn+F10) - »this will pop command prompt window, click into it and type command:

oobe\bypassnro

laptop will restart and you start setup again with country|keyboard, etc. - DO NOT connect to internet/network, choose "limited setup"(tiny print) - this will let you to create local account (this will be local admin by default)
IF you did connect to internet(WiFi)… there is way to recover, but takes additional commands

Once sorted with local admin account, you can add "work or school" account.
Admin credentials would be :
.\<username> that you created initially and pass
using these credentials you can elevate your azure\<username> user into local admins if you think you need(not recommend):
CMD as admin:

net localgroup administrators "azure\<username>" /add


Note:

<username> and azure\<username>

do not have to be same(recommend), local <username> could be <redzerdrog> or whatever suite you. Keep same for all PC's for ease of management in the future

azure\<username> is created once you sign in with your O365 account

NOTE: for sake of security - DO NOT use your global O365 admin account to sign in to computers for day-to-day operations.
Global O365 admin account should be used for O365 management purposes only, have strong password and MFA(as all other accounts), does not require individual license as used SOLELY for O365 management.

Consult with IT company if you value your "online" future…