Feature Requests!
Posted: Sun Feb 14, 2016 3:08 pm
This plug-in looks very cool but I would like to suggest the following features.
– Read a computer EDF that contains any additional authorized use accounts, such as, “domain\jdoe,pcname\jsmith”.
– Allow for users defined in the plug-in to be in all local admin groups, such as, “corp\admin-tech”, “corp\admin-desktop” and “pcname\admin-local” in addition to the typical domain defaults.
– Allow for the generation and passwords for defined local user account, i.e. “pcname\admin-local” and store that password as a computer EDF.
– Change the password at specified time intervals
– Have a function that would make the currently logged in user a local admin for a specified time interval and schedule the removal at that time.
We use to have a script that did this and it was very beneficial for a variety of use cases. The unique local admin account created would be used for malware removal, it would also allow us to give an end-user that may be locked out and traveling a login they could use until they return. It also allowed for the exception of a user needing local admin rights. Lastly, if we have a technical end user working with a vendor we can give them temporary local admin rights to their user account to assist and then automatically remove.
Thanks!
AJ
– Read a computer EDF that contains any additional authorized use accounts, such as, “domain\jdoe,pcname\jsmith”.
– Allow for users defined in the plug-in to be in all local admin groups, such as, “corp\admin-tech”, “corp\admin-desktop” and “pcname\admin-local” in addition to the typical domain defaults.
– Allow for the generation and passwords for defined local user account, i.e. “pcname\admin-local” and store that password as a computer EDF.
– Change the password at specified time intervals
– Have a function that would make the currently logged in user a local admin for a specified time interval and schedule the removal at that time.
We use to have a script that did this and it was very beneficial for a variety of use cases. The unique local admin account created would be used for malware removal, it would also allow us to give an end-user that may be locked out and traveling a login they could use until they return. It also allowed for the exception of a user needing local admin rights. Lastly, if we have a technical end user working with a vendor we can give them temporary local admin rights to their user account to assist and then automatically remove.
Thanks!
AJ