My organization is in its first year of using Jamf Pro and now I am the de facto Apple admin. I recently configured our desktop support AD admin group to have admin access on AD bound Macs with their network admin accounts. That part is working perfectly but we have some devices that are in labs that have some heavy restrictions on System preferences. I can't seem to figure out how to bypass the restrictions on non-local admin accounts.
Does anyone have a suggestion (or solution) for a way forward? I am fairly proficient with Bash so if there is some general guidance on best practices, I am pretty sure I can figure out how to script the solution based on your feedback.
Thanks in advance! Any help is appreciated.