One of the “features” of Right Click Tools that comes up often when we work with customers is the fact that out of the box, Right Click Tools requires Local Admin access on the target computer you are running actions against in order to be successful. When you install without any additional configuration, your Right Click Tools actions are being run as the user who initiates the tool from the console, so that is the user who would need to have Local Administrator on the target computer.
This article is going to talk about three different ways of setting up Enterprise Right Click Tools with the Recast Management server, and what the Local Admin Requirements are for each.
With the default install of Right Click Tools and the Recast Management Server, it is required that the person running the originating ConfigMgr console have Local Admin access to the target computer in order for the actions to complete successfully.
Here’s how the actions are run in a default installation of Recast Management Server (and there’s a diagram of this setup below):
Using a Recast Proxy, you can limit the number of Admin Users in your environment by having all actions run as a single Service Account. A Recast Proxy is a service that runs under a service account and it can be used to run Right Click Tools actions under that Service Account. When running with a Recast Proxy, the steps to running a Right Click Tools action look like this (And another diagram is below):
If your organization has removed all named Local Administrator accounts, or is using LAPS to rotate the password after a predetermined time, you can use the Recast Agent and run actions without Local Admin access at all.
With the Recast Agent running on a target computer, there is no need for any users to have Local Administrator access on the target computer. Recast Agent is a service running on a computer that acts as a Right Click Tools client. When the Agent service is running, Right Click Tools actions can execute under the system context, which means that Local Admin is not required to run actions. When running actions with the Recast Agent, the steps look like this:
Hopefully this helps understand some of the ways we can changeup the Local Administrator requirements for Right Click Tools.
Marty is the Customer Success Manager at Recast Software. Heblogs about trends that come up when supporting customers using Right ClickTools. His email address is firstname.lastname@example.org