Elevate admin rights

[Carlos Yanez Baez]

Hello community,Is it possible to set up an admin account to be used only to elevate access?For example, have 2 accounts, "TestAdmin" in the Administrators group and "TestUser" in the Users group. Disable log on for the "TestAdmin" account and only use it to elevate access (installing apps, change network configurations, etc...).I've done the following so far:1. Create the necessary accounts for the test and include them in the correct group.2. Add the "TestAdmin" account in Local Security Policy > Local Policies > User Rights Assignment > Deny log on locally - Deny log on through Rem

Continue reading...