Managed Admin Privileges

Standardize non-exempt accounts
Managed Admin Privileges

This script demotes all user accounts on managed Macs to standard (non-admin) privileges. During deployment, you can provide a list of exempt accounts that should retain admin privileges and this list can be changed as needed.

Controls

• List of exempt accounts
• Optional use of self-service Temporary Admin Promotion in MacManage.

Notes

• The standardization script runs every 30 minutes.
• When the script is in place, the support desk can still help with admin elevation requests
• If preferable, the script can be set not to target certain devices, if you'd prefer to limit its scope by device instead of by user account.

See also

Temporarily Promote Your macOS Standard Account to Admin