Our company has a .loc domain with several Windows 10 computers on it. One of the computers, let's call it ComputerA, is used by an employee with a non-administrator domain user account.
On ComputerA, we want to add a local administrator account that would not be on the domain but that could be used occasionally to install software on ComputerA only. Is this possible? I know that our solution is likely not best practice, but I'm curious if there is a way to do this.
Note that I will eventually turn over my domain administrator responsibilities to another employee.
Because our company and its IT processes are very slow-moving, installing a small tool on ComputerA (necessitating that a domain administrator account logon to the computer to approve the install) would result in such a headache of time and effort that it would make it not even worth it.