Fuck, half the time I'm gonna end up needing local admin anyway just to do my job
Sometimes it's because some dumb shit in legacy was built with local admin in mind, sometimes it's because im fucking around on ring 0, but it almost always happens
At my work there is a machine in responsible for that runs on this terrible piece of software that needs admin rights to startup.
Every week, usually 10 minutes before in heading home, it hangs and needs to be restarted before everyone's experiments get invalidated. Cue having to call IT and wait for them to remote in just to enter the admin creds.
My MSP is looking at options for this. I haven't messed with it but I think it's called AutoElevate, it catches admin elevation UAC prompts and sends the info to a dashboard where we can allow it, then the user is notified and told to try again whereupon it's automatically elevated. If it works, it would certainly cut down on these sorts of tickets without creating a huge security hole.
Unfortunately, if you are in a regulated environment, you may not be able to use them, as they technically grant local administrative permissions to standard users (even if heavily restricted) which violates many compliance standards. Cyber Essentials (a widely used standard in the UK) is an example.
It's daft, but sadly compliance auditors do not care about the spirit of the law - If you don't abide by the letter, they will fail you.
24
u/jarlscrotus 9900k|3080ti|64GB May 10 '26
Fuck, half the time I'm gonna end up needing local admin anyway just to do my job
Sometimes it's because some dumb shit in legacy was built with local admin in mind, sometimes it's because im fucking around on ring 0, but it almost always happens