I'm trying to allow junior admins to have access to install drivers on client machines. When hardware without signed drivers is inserted it requires a local admin account credentials.
I want to set up a local admin user on client machines that can be used to install drivers, but not to login.
I have tried restricting login hours, and login machine, but both of these also prevent driver installation.
I was thinking of creating a custom login shell as a vbs script that logs you out, but I was hoping for a more elegant solution.