Macs in our environment are not bound to a directory. This is causing issues with a 3rd party Help Desk being able to assist the end users as the ONLY Admin of the device is the local administrator account. The password is not considered common knowledge due to security restrictions put on the help desk vendor.
Previously (prior to Jamf) we did directory Bind and use an AD security group to allow administration of the system. But now there are less users on-site and we're trying to implement Zero Touch Deployment, do Directory Binding was removed.
What are my options for enabling our vendor technicians to administer macs without sharing the local password (if any)?
