Ideas

There is value in moving to "passwordless" where users do not know their password. User authentications would be expected to use a phishing-resistant method such as WHfB or Security Key. The Windows UAC prompt is one challenge that needs special a...

As more people are using passwordless and/or long passwords, when using the run as domain users, writing the password is a bit legacy. Could we use Windows Hello for Business credentials to confirm the elevation without using a password?

Report to show on what devices user has permanent admin access. Report to show all users that have permanent admin access on devices.

instead of configuring it for every target group it should have a central place-

I would like to see and be able to retrieve also previous randomized passwords

Ability to enable/disable local user accounts and ability to delete local groups and local user accounts

Allow the customer to duplicate a rule and modify based on need.

Defining a scenario in which a MSP is managing PM of multiple end customer environments from shared RMS. This means that MSP is able to manage PM configuration & activation codes etc. for all (or multiple) of their end customer environments us...

Would be nice to limit specific admins to only specific time frames of validity times. e.g., full admin group can have all validity times, but helpdesk or lower specified admins in the group can have only a subset of something like one time use, o...

Seems like a random issue to find devices with EntraID search in Carillon and the policies are not valid for those devices, even devices are connected to company internal network. This would help service desk to give tempadmin codes for users glob...