Lockup Domain User in Specific Computer and Escalate Permissions

Sometimes, you will need to give some domain users (may be the desktop support) Network Configuration Operators role or even Local Administrator permissions on specific client machines so that they can fix something with the elevated permissions.  You can do this by simply adding these users into the necessary local security groups on these machines.
Nope! it’s a boring day-to-day task and what if you forget to remove these permissions later ? Continue reading “Lockup Domain User in Specific Computer and Escalate Permissions”