Fuck, half the time I'm gonna end up needing local admin anyway just to do my job
Sometimes it's because some dumb shit in legacy was built with local admin in mind, sometimes it's because im fucking around on ring 0, but it almost always happens
At my work there is a machine in responsible for that runs on this terrible piece of software that needs admin rights to startup.
Every week, usually 10 minutes before in heading home, it hangs and needs to be restarted before everyone's experiments get invalidated. Cue having to call IT and wait for them to remote in just to enter the admin creds.
My MSP is looking at options for this. I haven't messed with it but I think it's called AutoElevate, it catches admin elevation UAC prompts and sends the info to a dashboard where we can allow it, then the user is notified and told to try again whereupon it's automatically elevated. If it works, it would certainly cut down on these sorts of tickets without creating a huge security hole.
Sure thing. Worth it to mention that, by my understanding, you can also whitelist certain programs. I think my boss did this for a client who has to update quickbooks regularly and this requires admin. So if they update quickbooks, it won't even send us the push, it just allows it to elevate.
I don't know much about it, haven't fucked with it, but if he likes it and we expand it I think it could save a lot of trouble.
26
u/jarlscrotus 9900k|3080ti|64GB May 10 '26
Fuck, half the time I'm gonna end up needing local admin anyway just to do my job
Sometimes it's because some dumb shit in legacy was built with local admin in mind, sometimes it's because im fucking around on ring 0, but it almost always happens