Add local administrator account on Windows 10 computer on .loc domain

Question

Our company has a .loc domain with several Windows 10 computers on it. One of the computers, let's call it ComputerA, is used by an employee, let's call him Sam, who has non-administrator domain user account.

On ComputerA, we want to add a local administrator account that would not be on the domain but that Sam could to occasionally install software on ComputerA only. Is this possible?

We recognize that it's likely not a best practice, but are curious if it's possible.

Note that I will eventually pass my domain administrator responsibilities to another employee.

Every time Sam wants to install even a small productivity tool on ComputerA, it requires that Sam get a domain administrator to logon to ComputerA to install it.

Because of an overburdened and inefficient IT group at the company, it's such a headache for Sam to install a productivity tool that he doesn't do it, which in the long-run is decreasing his productivity.

Answer 1

I discovered how to do this:

1. Open Computer Management as an administrator
   
2. Go to System Tools - Local Users and Groups - Users
   
3. Right click to Add New User
   
4. When the new user has been created, right click on that user and select Properties
   
5. Select Member Of tab
   
6. Click Add button
   
7. Click the Advanced button
   
8. Click the Find Now button
   
9. Choose the target local administrator group name
   
10. Click Ok
    

https://www.isumsoft.com/it/how-to-add-user-to-local-administrator-group-in-windows/