Allow users to override the ability to use the user account of the user logged into the SCCM console when retrieving LAPS passwords instead of the proxy user account when the proxy is set to a higher priority in the routes.
I like the fact that I can assign many admin rights and permissions to the proxy account to admin devices, but I do not want that user account to be able to access laps passwords, the only user accounts that need access are the ones who are able to launch the sccm console.
If the proxy is a higher priority in the routes path then it will attempt to use the proxy account instead of the logged in user which then makes the ability to retrieve passwords broken.
Product | Recast Management Server |