Event banner
Event details
What is the best way to prevent giving users local admin rights. I know there are solution on the horizon like Endpoint Privilege Management but still only covering a small portion like exe. What is the best approach till EPM is fully featured and covers "all" scenarios? Just adding a user account to local admin group?
Thanks for participating in today's session of AMA: Finding your way to “cloud first”! For reference, the panel covered your question at 28:40.
- This is something we are just working through also. We looked at EPM and PAM. I have now suggested that the endpoints arent used for developement and instead we are going to remove their local admin rights on the endpoint and all developement work will move to Cloud PCs/AVD setup.
- Have you looked at Windows LAPs?
- we did and use it. I dont want to give out the use the user / pwd to use. From my point of view I dont have any control a user while having the knowledge of user / pwd. For me the challenge is that users are used to have local admin rights. They are developper and want to install testing tools etc. I want to prevent that and get rid off it.
