+4Hey guys, we're looking for an opportunity to grey out the option "Allow this user to administer this computer" in system settings. Our users are no local admins and we do not want them to enable that option.
Any ideas?
thank you so much,
Best, Florian
Best answer by talkingmoose
Standard users can't elevate themselves to admin using this switch without having someone else's admin credentials. If you're finding someone with admin credentials is toggling this switch, you'll need to address that as a people issue. I may be wrong, but I don't believe this is a setting you can disable for admins.
+36Standard users can't elevate themselves to admin using this switch without having someone else's admin credentials. If you're finding someone with admin credentials is toggling this switch, you'll need to address that as a people issue. I may be wrong, but I don't believe this is a setting you can disable for admins.
+26You need to be an admin to make someone an admin. If the user toggles the box, it should ask them for admin credentials. If they cannot provide credentials, they cannot proceed. If they have admin credentials, then that is your problem and training is needed.
I know this is functionally a repeat of what @talkingmoose said, but its correct.
+4thanks guys for super fast reply. For sure you're right - admin credentials required in order to enable that toggle. But since that's not a use case for us at all (nobody should make himself to admin) - also with help of any other "admins" - I wanted to give it a shot and ask whether this checkbox can be greyed out using mdm settings.
But it looks like that's not possible. thanks guys for verification and your opinion. Much appreciated!
best
Flory
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.