I'm looking to give contractors standard user rights while also giving them admin rights day by day. Looking to require a daily log on to a system that gives a temp admin password for the day. When they need to run something with admin rights,
they use the temporary admin credentials which expire in 8,10,12 hours or so. We use a Citrix for VDI machines. Perhaps it would be best to log in to physical machine with standard rights credentials, then request the admin password from there
and log in to Citrix with that temp admin password. This way they wouldn't have to type it all day within Citrix.
↧