One time password for admin privileges

Chong 846 Reputation points


Our DC is Windows server 2019 and clients are Win10 and Win11. The user account don't have privileges to install software on their client computer. Can we setup a "One time password" to the user so they can install software by themselves?

If yes, can we control the period of time?

If no, any Microsoft product can provide these services?


Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,598 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Hania Lian 11,036 Reputation points Microsoft Vendor


    You can do this by using a combination of Group Policy and a feature called Elevated Privileges. However, instead of a one-time password, the method grants users temporary elevated privileges for a specific task or time frame through Group Policy preferences.

    Use Group Policy and Task Scheduler to create temporary local Administrators group memberships. You can use Group Policy preferences to temporarily add users or groups to the local Administrators group. Set the action to apply only once, specify when it should be performed (for example, at sign-in), and set an expiration date to automatically remove it from the group:

    • Navigate to Computer Configuration > Preferences > Control Panel Settings >Local Users and Groups.
    • Create a new Update action for the local Administrators group.
    • Specify user accounts and set up project-level targeting (targeting specific computers/users) as needed.
    • Use the General tab to configure the duration (start date and end date).

    Best Regards,

    Hania Lian


    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments