ADCE: Temporary Elevated Privileges
There are cases where the business situations override technology standards forcing IT administrators to support legacy applications and to grant users elevated privileges on their workstations. In other cases, business user may require temporary elevated privileges to configure the operating system, for instance, to install printer drivers or to install some software.
Administrators grant elevated rights to users by using native Microsoft Active Directory Management Tools.
Special purpose computers such as those in an Industrial Plant or in a Lab can be excluded.
Elevated privileges are granted without requiring the user to logoff and login again.
User are granted elevated privileges as soon as they verify their credentials.
Real Time Updates
User privileges are updated within minutes after their security group membership is updated.
Elevated Privilege Acknowledgement
Elevated privileges are granted only after domain credentials are verified.
Privileged Local Groups
The administrator can select from any of the default local groups on a Windows computer.
User privileges are revoked as soon as the preset time elapses.