We currently support remote users and have had the challenge of accessing their machines (via secure remote login)to do work because they're always busy. i was just wondering if it's possible to create a separate account on the end users laptop with admin rights but with no access to the users stuff on the laptop if this makes sense. The idea is to enable us access the machine using a separate (support) account when say the user is out for lunch, in order to install software, resolve any issues they may have etc. We prefer not to have to access to their stuff since they're away. Anyone have experience with this please, also other recommendations appreciated.
I didn't find the right solution from the internet.