Grey out "Allow this user to administer this computer"

user-JamkUnnTYp
New Contributor III

Hey guys, we're looking for an opportunity to grey out the option "Allow this user to administer this computer" in system settings. Our users are no local admins and we do not want them to enable that option. 

Untitled 2.png

Any ideas? 

thank you so much, 

Best, Florian

2 ACCEPTED SOLUTIONS

talkingmoose
Moderator
Moderator

Standard users can't elevate themselves to admin using this switch without having someone else's admin credentials. If you're finding someone with admin credentials is toggling this switch, you'll need to address that as a people issue. I may be wrong, but I don't believe this is a setting you can disable for admins.

View solution in original post

AJPinto
Honored Contributor II

You need to be an admin to make someone an admin. If the user toggles the box, it should ask them for admin credentials. If they cannot provide credentials, they cannot proceed. If they have admin credentials, then that is your problem and training is needed.

 

I know this is functionally a repeat of what @talkingmoose said, but its correct. 

View solution in original post

3 REPLIES 3

talkingmoose
Moderator
Moderator

Standard users can't elevate themselves to admin using this switch without having someone else's admin credentials. If you're finding someone with admin credentials is toggling this switch, you'll need to address that as a people issue. I may be wrong, but I don't believe this is a setting you can disable for admins.

AJPinto
Honored Contributor II

You need to be an admin to make someone an admin. If the user toggles the box, it should ask them for admin credentials. If they cannot provide credentials, they cannot proceed. If they have admin credentials, then that is your problem and training is needed.

 

I know this is functionally a repeat of what @talkingmoose said, but its correct. 

user-JamkUnnTYp
New Contributor III

thanks guys for super fast reply. For sure you're right - admin credentials required in order to enable that toggle. But since that's not a use case for us at all (nobody should make himself to admin) - also with help of any other "admins" - I wanted to give it a shot and ask whether this checkbox can be greyed out using mdm settings. 

But it looks like that's not possible. thanks guys for verification and your opinion. Much appreciated!

best

Flory