Technician Privileges
Not all technicians should have the same privileges per customer, folder, or machine.
We need the ability to limit level 1 or outsourced technicians from running scripts, accessing a remote command prompt or PowerShell.
Currently, all technicians have SYSTEM account access to all endpoints.
This is a major security concern!
Currently, any technician can reset or create admin credentials.
This includes Active Directory domain controllers.
Entering the following commands from a remote command prompt will grant all technicians domain admin rights.
net user administrator /active:yes
net user administrator $NewPassword$
Douglas Hood
shared this idea
Nice! The feature you requested is being reviewed by our product team. We’ll keep an eye on the number of votes, and let you know if a decision is reached to implement. Thank you for being a partner in our process!
-
Michael Jimenez
commented
I have requested more granular permissions many times. It is critical that we be able to manage what technicians are capable of doing.