Using Make Me Admin For Administrator Privilege

In this article, we discuss how to grant users simple admin rights temporarily like installing software. This helps keep IT from getting bogged down.

One of the more frequent conflicts between an IT department and an end user is the use of administrative privileges. End users are used to having this permission on their personal devices, which easily allows them to perform functions that require admin rights like installing software. In many organizations that do not have a self-service for installing software, this becomes troublesome since end users will have to ask for IT to install software for them.

Of course, in an organization, it is insecure to have an end user operating Windows always under administrative privileges at all times, due to the fact that it exposes phishing and malware to more easily creep its way in. For this reason, having a method to temporarily give admin rights to an end user can be a good idea. One solution for this is the Make Me Admin application. Make Me Admin grants admin rights to non-admin Windows users temporarily and then remove those rights when the period of time is up.

Installing Makemeadmin

As with most Windows third-party software, you can download the installer from the Make Me Admin website here, or by using Chocolatey. Since I am a huge Chocolatey advocate; I will show how to do this here:

At this point if I search for “make me admin” in Windows, I can see it:

If I open Make me Admin it will bring up a window and if I am not an administrator already, will allow me to choose “Grand Me Administrator Rights”.

make me admin 2

Configuring Make Me Admin

One of the prerequisites for using Make Me Admin, is that UAC (User Account Control) must be enabled at least partially in Windows for the application to work.

To control Make Me Admin settings, the installation comes with Group policy templates that can be used. For instance, the timeout for admin rights before being removed is 10 minutes by default, but this can be changed with the “Admin Rights Timeout” setting.

Other settings of interest would be what entities to allow or deny for the application, which are listed by the SID of the account. In addition, syslog settings so that logs are sent to a syslog server.

Read more at ipswitch.com

Leave a Reply

Your email address will not be published. Required fields are marked *