Our company has a .loc domain with several Windows 10 computers on it. One of the computers, let's call it ComputerA, is used by an employee, let's call him Sam, who has non-administrator domain user account.
On ComputerA, we want to add a local administrator account that would not be on the domain but that Sam could to occasionally install software on ComputerA only. Is this possible?
We recognize that it's likely not a best practice, but are curious if it's possible.
Note that I will eventually pass my domain administrator responsibilities to another employee.
Every time Sam wants to install even a small productivity tool on ComputerA, it requires that Sam get a domain administrator to logon to ComputerA to install it.
Because of an overburdened and inefficient IT group at the company, it's such a headache for Sam to install a productivity tool that he doesn't do it, which in the long-run is decreasing his productivity.
Administratorsgroup? Why does it have to be a local group? (A domain account is easier to manage)