One time password for admin privileges

Question

Hi,

Our DC is Windows server 2019 and clients are Win10 and Win11. The user account don't have privileges to install software on their client computer. Can we setup a "One time password" to the user so they can install software by themselves?

If yes, can we control the period of time?

If no, any Microsoft product can provide these services?

Thanks

Answer 1

Hello.

You can do this by using a combination of Group Policy and a feature called Elevated Privileges. However, instead of a one-time password, the method grants users temporary elevated privileges for a specific task or time frame through Group Policy preferences.

Use Group Policy and Task Scheduler to create temporary local Administrators group memberships. You can use Group Policy preferences to temporarily add users or groups to the local Administrators group. Set the action to apply only once, specify when it should be performed (for example, at sign-in), and set an expiration date to automatically remove it from the group:

• Navigate to Computer Configuration > Preferences > Control Panel Settings >Local Users and Groups.
• Create a new Update action for the local Administrators group.
• Specify user accounts and set up project-level targeting (targeting specific computers/users) as needed.
• Use the General tab to configure the duration (start date and end date).

Best Regards,

Hania Lian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.