Hey everyone! I'm currently working in an Active Directory environment and I'm trying to find ways to let a service or technician account perform specific software installations on endpoints without adding it to the local Administrators group. I'm looking for effective methods to delegate permissions that align with the principle of least privilege, while still providing some flexibility for our IT staff or for occasional software deployments. Has anyone faced a similar challenge? What tools or methods did you use to manage this?
1 Answer
You should definitely consider using a management infrastructure tool. There are plenty of options out there like Microsoft Configuration Manager, Intune, and PDQ Deploy that can manage workstation installations without requiring full admin rights. They’ve solved the problem of delegating permissions effectively, so you can pick the one that suits your needs best.
Great point! I’ve recently discussed similar setups and tools like Action1 can also handle these installations seamlessly without compromising on security.