Good morning! My girlfriend's company has strict policies regarding local admin rights on devices. Whenever she needs admin privileges, instead of the usual Yes/No or username/password prompt, she must provide a reason, and that request gets emailed to someone for approval. Recently, her laptop lost network capability, and she was instructed to run a program called 'administratoraccess' that gave her a PIN code. Once she entered the code, she got a message saying, 'Administrator Session Started. You have 59 minutes.' This allows her admin access until the machine reboots or the timer runs out. I'm trying to find out more about this program, but any attempts to search for info triggers that UAC prompt where she has to explain her actions. Any insight would be appreciated!
5 Answers
I think there's also a program called ThreatLocker that has similar features, but I’m not too familiar with it to confirm if it’s the one you're looking for. Just putting it out there as another possibility.
It's great to explore different options. Keep them in mind in case her workplace changes their policy!
It could also be a feature from some PAM systems like AutoElevate or something similar. I've heard about them being used in these scenarios, but I’m not entirely sure.
Yeah, PAM solutions often allow for limited admin access when network connectivity is down. It's not the best situation, though.
That's a good thought! It might be a fallback option for situations like network failures.
It sounds like your girlfriend's company is using Admin by Request. This software manages admin access quite efficiently. You can check out their official site for details and features. It fits the description of what you're experiencing.
Yeah, I took a look at their site too, and it seems to match exactly! Thanks for pointing that out!
Seems like a solid guess, definitely sounds similar to ABR's functions.
Wow, that's quite a process! If they rolled this out at my workplace, it might grind everything to a halt. My team only has supervised access, which seems much safer than handing it over like that.
Agreed! It seems risky to give people ad-hoc admin access. There should be stricter controls in place.
It can definitely complicate things. With my team, we have local admin rights for server work, but we maintain strict control.
Maybe you should see if her IT department can clarify. While it's probably meant to be secure, reaching out to them might give you the insights you need. But I get that the offshore helpdesk isn't always helpful.
Their helpdesk has strict guidelines, so it makes it tricky to get info on this stuff. It's frustrating!
Asking an IT department about their own policies is a good call. They might have insights that aren't written down anywhere.
Definitely good to know! I checked them out, but it didn't look like what was showing on her screen.