In most cases, users need admin rights to install or update software, such as Adobe Reader, Visual Studio or VPN software.
The tricky part about revoking local admin rights is doing it in a way that doesn't hinder your user’s productivity,
lock down local admin rights. That's what Admin By Request can do for you.
When a user starts an install, the process is intercepted and the user has to enter a reason, email and phone number to continue.
You can adjust settings to automatically approve installs for some users and require IT approval for others.
The true value of this approach is not a technical one; users do the same as they have always done, but they don't
have admin rights to make any changes on the machine.
Because users do the same as they have always done, no users are unhappy, and no re-education is needed – Admin By Request
seamlessly fits into their everyday work life. Think about the value of being able to smoothly revoke admin rights without having to re-educate all your users.