I would strongly advise against it, but if you are set on it I can recommend PowerBroker:
http://www.beyondtrust.com/Products/PowerBrokerforWindows/ It elevates programs and leaves the user with their standard rights. It can be horribly abused, but anything that gives a user admin rights can. On Thu, Apr 17, 2014 at 4:13 PM, JONES, RICK J <rj7...@att.com> wrote: > Has anyone run across a tool or a script of any sort that could be > deployed by SCCM to allow a user to self-elevate their rights to Local > Administrator and then say, an hour later remove those admin rights? > > > > I have all kinds of ideas for it, but hoping that someone has already done > this. > > > > Rick J. Jones > Wireless from AT&T > Domestic Desktop Application Management > D: (425) 288-6240 > C: (206) 419-1104 > > > >