Event banner
Event details
Hi Todd, our engineers have separate _onprem admin accounts, however our users have 'standard' accounts. One thing we have been using for some time is Admin By Request. Any user that has the client installed and is enabled to use it can elevate permissions. They would have to give a reason and this is logged into the audit logs. Just a suggestion, might be other stuff out there that others are using.
As an aside, you can also control what groups go into the local admin group on end user devices using Intune Configuration Profiles. We also use these and they work very well
Hi Nick, thank you for the suggestion with Admin By Request. I hadn't seen this before and the possibility of having logging for requests would be awesome.