In this given situation I need your support:
there are several workstations running with Local & Domain Administrators and Domain Restricted Users. These restricted users happen, from time to time to need elevated rights or an administrative account for running updates, drivers, etc.. What solutions might there be, with full detail on applying them do I have? My ideeas are, but without clue on how to apply them:
1) create another local administrator account and password and make them available on demand only.
2) create a batch, exe, etc. file that the restricted user can run, within the script all settings necesarry to add an administrative account that I will delete afterwards
-The demand can be when the user is out of office, without Internet so it must be a standalone SOS solution
-the local Administrator account is being used now for several tasks since I am not the domain administrator