Your network contains a single Active Directory domain named contoso.com. The domain contains a computer named Computer1. You have five users configured as shown in the following table. Which two…

User1 is a standard domain user with no local administrator rights on Computer1, so the ability to add a Microsoft account for sign-in is blocked.

User2 lacks local administrator privileges on Computer1, which are required before a domain-joined Windows 10 device will permit Microsoft account linking.

User3 does not have local administrator rights on Computer1 and therefore cannot connect or sign in with a Microsoft account on this domain-joined device.

User4 holds local administrator rights on Computer1, which is the prerequisite for connecting a Microsoft account to a domain-joined Windows 10 device and signing in with it. Without local admin membership, the option to link a Microsoft account is restricted by default domain policy.

User5 is also a member of the local Administrators group on Computer1, satisfying the same requirement that permits linking and signing in with a Microsoft account on a domain-joined device.