We use tools to allow local user to promote to admin for a short period of time (1h), they must provide reason and this action is sent to our SIEM for monitoring.
We use :
- Privilege (https://github.com/SAP/macOS-enterprise-privileges) for macOS
- MakeMeAdmin (https://github.com/pseymour/MakeMeAdmin) for Windows
Now that you added local users management on Hexnode, offering a similar feature into Hexnode UEM would be much appreciated.