Add admins when the Administrators group is empty


The administrators group on Windows is deleted, leaving the device without admin account. 


  • Windows
  • Google Credential Provider for Windows


  1. Log in to the Admin console.
  2. Navigate to Devices Mobile and endpoints Settings Windows Settings.
  3. Click on Administrative privileges.
  4. If the feature is enabled, go to the section Accounts with local administrative access.
  5. Add the users to the list, you must enter the accounts for the local Administrator group, separated by commas.
  6. Enter Active Directory users as YourDomain\user, Active Directory groups as YourDomain\group and local users as username 
  7. Save the changes.


When the policy is not properly configured it will clear the administrators group on the device.