How to Sign In as a Local Administrator on an Azure-Joined Device
Question details
Users need to know the correct procedure to log in as a local administrator on a device joined to Azure AD, and whether they need to repeat the Windows setup process.

- Product
- Windows 10 / Windows 11
- Device & OS
- Windows
- Scenario
- Accessing a newly assigned or shared Azure AD-joined device using local administrator credentials.
- Observed behavior
- The Windows setup experience and PIN configuration prompts appear repeatedly for each new local administrator or Azure account logging into the device.
Ensure you have the exact local administrator username and password or the appropriate Azure AD credentials provided by your IT administrator, and verify that the device is connected to the internet.
Sign in Using Local Administrator Credentials
Use the correct credential formatting to bypass the default Azure AD domain login and access the local administrator account.
When a Windows device is joined to Azure AD, the default login screen expects an Azure AD email address. To log in with a local account, you must explicitly tell Windows to look at the local machine rather than the network domain.
On the Windows login screen, click on 'Other user' located in the bottom-left corner of the screen.
In the username field, type '.\' (a period followed by a backslash) immediately followed by your local administrator username (for example, '.\Administrator'). This forces Windows to recognize a local login.
Type your local administrator password in the password field and press Enter to sign in.
Follow the on-screen Windows out-of-box experience (OOBE). You will be prompted to configure privacy settings and create a Windows Hello PIN for this specific local account.

Sign in with an Azure AD Administrator Account
Log in using an Azure AD account that has been granted local administrator rights via Intune or Azure AD device settings.
Boost Your Productivity with WPS Office on Any Windows Device
After setting up your local administrator or Azure AD profile, you may need a reliable office suite for your new user account. WPS Office offers a free, lightweight, and highly compatible alternative to Microsoft Office, ensuring you can open, edit, and share documents seamlessly without additional enterprise licensing costs.
- 1. Download the software: Visit the official WPS Office website and download the free installer to your newly configured local administrator profile.
- 2. Install WPS Office: Run the installer and follow the simple on-screen instructions to deploy the software on your Windows device.
- 3. Open and edit files: Launch WPS Office to instantly access, edit, and save your existing Microsoft Office documents without formatting issues.

Frequently Asked Questions
Why does Windows ask me to create a PIN again when I log in as a new local administrator?
Windows treats every new user login—whether a local administrator or an Azure AD account—as an entirely separate user profile. The initial out-of-box experience (OOBE) and Windows Hello PIN setup will run automatically to establish personalized security settings for that specific profile.
How do I force Windows to recognize a local account instead of an Azure AD account on the login screen?
You can force a local login by typing '.\' (a dot and a backslash) immediately before your local username (for example, '.\Admin'). This syntax instructs Windows to look for the credentials on the local machine rather than authenticating against the Azure AD domain.
Can IT manage local administrators on Azure-joined devices centrally?
Yes, IT administrators can manage local administrator groups on Azure AD-joined devices using Microsoft Intune endpoint security policies or through the Azure AD device settings to automatically assign local admin rights to specific organizational users.




