No one has responded to this discussion for at least a year, so this information may be out of date. If you're looking for information about this topic, please search for a more recent discussion or post a new question.

Lync and Admin Security

This question is answered This question is answered

For all of my companies PCs, users accounts are general, non-admin. This has been done to control the software loaded onto our machines. Anything that gets loaded needs administrator approval.

 

We were hoping our users could contact our administrators for admin approval (even for routine Microsoft Updates) by using Lync. Then, the user could share their screen/give the administrator control and the administrator could supply the admin password.

 

Unfortunately, whenever Sharing is active and the prompt for the admin password comes up - Sharing is paused. Is there any way to keep this from happening?

 

Any help would be appreciated.

 

Thanks,

Scott

Verified Answer
  • Hi Scott,

    Currently, it is not available for the administrator to give the privilege to install software or updates on a standard user’s computer by using Sharing Desktop. As the users do not have the administrator privilege, when they share the desktop with the administrator and ask the administrator to approve to install the software or updates, the sharing desktop will be paused. Thus, the software or updates will not be able to install successfully.

    As a workaround, the administrator can remotely access the standard user’s computer to install software or updates. Thank you for your understanding.

    Best Regards,
    Josephine Meng

All Replies
  • Hi,

    When sharing the desktop, if the user is doing something that need the administrator privilege,  User Account Control (UAC) window will pop up, and then the Desktop Sharing will be paused. To fix this situation, you will need to turn off UAC on every users’ computers.

     

  • Won't this preclude this preclude our ability to prevent unauthotized software loaded onto our machines?

  • No, turning off the UAC doesn't necessarily give them the rights to install things, it just stops the pop up and black out screen asking 'is this ok'. As long as they aren't admins they won't be able to install anything, even with the UAC turned off.

    Thanks,

  • In turning off UAC on every users’ computers, will our Admins be able to approve the loading of software or MS updates, now, via Lync?

  • Hi Scott,

    Currently, it is not available for the administrator to give the privilege to install software or updates on a standard user’s computer by using Sharing Desktop. As the users do not have the administrator privilege, when they share the desktop with the administrator and ask the administrator to approve to install the software or updates, the sharing desktop will be paused. Thus, the software or updates will not be able to install successfully.

    As a workaround, the administrator can remotely access the standard user’s computer to install software or updates. Thank you for your understanding.

    Best Regards,
    Josephine Meng