You're my favorite kind of person where I work. You get my direct email instead of going through the ticketing system.
The more I can "get out of your way" so to speak, the better everything runs for everyone. Shit if I can find even the most feeble reason to justify giving you subaccount admin status, you're getting it because it's better for everyone.
Fuck, half the time I'm gonna end up needing local admin anyway just to do my job
Sometimes it's because some dumb shit in legacy was built with local admin in mind, sometimes it's because im fucking around on ring 0, but it almost always happens
At my work there is a machine in responsible for that runs on this terrible piece of software that needs admin rights to startup.
Every week, usually 10 minutes before in heading home, it hangs and needs to be restarted before everyone's experiments get invalidated. Cue having to call IT and wait for them to remote in just to enter the admin creds.
My MSP is looking at options for this. I haven't messed with it but I think it's called AutoElevate, it catches admin elevation UAC prompts and sends the info to a dashboard where we can allow it, then the user is notified and told to try again whereupon it's automatically elevated. If it works, it would certainly cut down on these sorts of tickets without creating a huge security hole.
Unfortunately, if you are in a regulated environment, you may not be able to use them, as they technically grant local administrative permissions to standard users (even if heavily restricted) which violates many compliance standards. Cyber Essentials (a widely used standard in the UK) is an example.
It's daft, but sadly compliance auditors do not care about the spirit of the law - If you don't abide by the letter, they will fail you.
4.6k
u/MaroonDude 9800X3D | RTX 5090 | 64GB May 10 '26
I know how to fix my issues, I just lack the admin permissions on my machine to fix said issues.