I setup a business account for my PC and then renamed it with our custom domain and now I don't have admin rights on my PC

Board of Trustees 0 Reputation points
2026-03-09T15:33:42.1966667+00:00

I setup a business account for my PC and then renamed it with our custom domain and now I don't have admin rights on my PC

I setup an onmicrosoft.com account.

Then added our domain to the onmicrosoft.com business account.

Then I renamed the "<removed PII>@fbcnmnj.onmicrosoft.com" account to "******@fbcnm-nj.org" and now I don't have admin rights on my PC.

I tried to call support and the system says support is now online and I need to go to aka.ms/pro website. When I try to login there, the website gives an error.

Windows for business | Windows Client for IT Pros | Directory services | User logon and profiles
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Kate Pham (WICLOUD CORPORATION) 825 Reputation points Microsoft External Staff Moderator
    2026-03-10T07:53:41.6733333+00:00

    Hello sir.

    Thank you for contacting Microsoft Q&A community!

    1/ If your PC is Entra joined, you can restore local admin rights centrally:

    In Microsoft Entra admin center: Entra ID → Devices → Device settings → Manage “Additional local administrators on all Microsoft Entra joined devices” → Add assignments

    This uses the Microsoft Entra Joined Device Local Administrator mechanism and is designed specifically for this scenario.

    Note: Microsoft’s doc also calls out that this option requires Entra ID P1/P2 licensing and applies to all Entra-joined devices.

    After it’s applied, sign out/in (or reboot) and try an elevated action again.

    For more details: https://learn.microsoft.com/en-us/entra/identity/devices/assign-local-admin

    2/ If you are locked out locally and cannot elevate anything): use Windows Recovery/Safe Mode to regain a local admin, then re-add your account

    net localgroup administrators /add "AzureAD\******@fbcnm-nj.org"

    (That AzureAD\UPN format is commonly used on Entra-joined devices; you must run it from an elevated terminal.)

    A Microsoft Q&A thread describing the “lost admin rights / only No button” symptom confirms Safe Mode can surface the built-in Administrator so you can recover access, fyi: https://learn.microsoft.com/en-us/answers/questions/3823709/lost-admin-access-on-my-own-laptop-after-renaming

    Moreover, in case you don’t see an Administrator account in Safe Mode:

    From WinRE → Advanced options → Command Prompt, you can enable the built-in Administrator and set a password (then reboot and sign in as Administrator). Many community fixes follow this pattern for the “UAC has only No” situation.

    If there are any lingering questions or if you require further clarification regarding to this ticket, please feel free to let me know. Would appreciate it if you find my response helpful and "Accept the Answer" 😊

    Regards!

    Kate.

    Was this answer helpful?

    0 comments
  2. Board of Trustees 0 Reputation points
    2026-03-09T15:38:36.34+00:00

    How do I contact a human from the "Azure Data Protection team using the phone number in the reference."
    What "reference"? Where is it?

    Was this answer helpful?

  3. AI answer

    2026-03-09T15:33:57.82+00:00

    Renaming the Microsoft 365 work account (from @fbcnmnj.onmicrosoft.com to @fbcnm-nj.org) in the cloud does not automatically update or preserve local Windows administrator rights. Windows now treats the renamed cloud account as a different identity for local sign-in/permissions, so the original local admin mapping is effectively lost.

    To regain admin rights on the PC, one of the following is required (depending on how the device is joined and what access is still available):

    1. Sign in with another local administrator account
      • If any other local admin account exists (local Administrator, another user with admin rights), sign in with that account.
      • Open Settings → Accounts → Other users (or Control Panel → User Accounts) and re-add the work account as an administrator on the device.
    2. Use an on-premises/domain admin (if domain-joined)
      • If the PC is joined to an on-premises Active Directory domain, sign in with a domain admin account.
      • Add the renamed work account (or the appropriate group) back into the local Administrators group.
    3. Use Microsoft 365 / Entra device management (if Azure AD joined)
      • If the device is Azure AD–joined and managed, a Microsoft Entra (Azure AD) Global Administrator or Intune administrator can push a policy to add the user (or a group) back to the local Administrators group.
      • If there is no other global admin, follow the account-access escalation paths in the tenant (see reference below) so another admin or Microsoft’s Data Protection team can help restore access.
    4. If locked out of all admin accounts
      • If no admin credentials (local, domain, or Entra) are available at all, recovery requires an administrator-level reset path outside the PC itself (for example, another tenant admin, or Microsoft 365 Data Protection support for business tenants) or a full OS reinstall, which will remove existing local profiles and apps.

    For tenant-level account access problems (for example, being the only global admin, or no global admin available) use the documented escalation paths:

    • If the only global admin on the account and locked out, contact the Azure Data Protection team using the phone number in the reference.
    • If the company has no global admin or the admin account is unusable, contact the Microsoft 365 Data Protection team via the regional support number listed in the admin support article and request help restoring admin access.

    Once an admin identity is restored (local or cloud), add the desired user back to the local Administrators group and avoid renaming or removing that account without first ensuring another admin account exists on the PC.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.