Grey out "Allow this user to administer this computer"

[user-JamkUnnTYp]

Hey guys, we're looking for an opportunity to grey out the option "Allow this user to administer this computer" in system settings. Our users are no local admins and we do not want them to enable that option. 

Any ideas? 

thank you so much, 

Best, Florian

[talkingmoose · Accepted solution]

Standard users can't elevate themselves to admin using this switch without having someone else's admin credentials. If you're finding someone with admin credentials is toggling this switch, you'll need to address that as a people issue. I may be wrong, but I don't believe this is a setting you can disable for admins.

[talkingmoose · Accepted solution]

Standard users can't elevate themselves to admin using this switch without having someone else's admin credentials. If you're finding someone with admin credentials is toggling this switch, you'll need to address that as a people issue. I may be wrong, but I don't believe this is a setting you can disable for admins.

[AJPinto · Accepted solution]

You need to be an admin to make someone an admin. If the user toggles the box, it should ask them for admin credentials. If they cannot provide credentials, they cannot proceed. If they have admin credentials, then that is your problem and training is needed.

I know this is functionally a repeat of what @talkingmoose said, but its correct. 

[user-JamkUnnTYp]

thanks guys for super fast reply. For sure you're right - admin credentials required in order to enable that toggle. But since that's not a use case for us at all (nobody should make himself to admin) - also with help of any other "admins" - I wanted to give it a shot and ask whether this checkbox can be greyed out using mdm settings. 

But it looks like that's not possible. thanks guys for verification and your opinion. Much appreciated!

best

Flory