Servicing a laptop and creating an admin user (eg scotchadmin)

Now that we no longer have local admin accounts on our users' laptops, please follow the steps below to create a local admin account on their machine should you need to troubleshoot an issue on their device. Note that their admin access will be automatically removed within one week.

Navigate to Jamf > Computers > Static Computer Groups > Helpdesk Service. Click on Helpdesk Service
In the bottom right hand corner, click edit. Now click on the Assignments tab.
Locate the computer you are servicing by typing in the Filter results field and tick its checkbox. Click Save (located where the edit button was).
On the users' device open the self-service app.

You will now have access to some options in self-service to create a local admin account. Choose the one that is appropriate for the user. The first two options will be the most common.

Laptop Service - Create user scotchadmin

Use this if you are servicing the users' laptop and need to perform an action that requires admin privileges. **Please note that if the laptop restarts, you will not be able to log in as scotchadmin, you will need the user to perform an authenticated Filevault login**
Laptop Service - Make me an admin

Use this if you wish to grant the user admin rights using the currently logged in account. You may choose this option if the user requires admin access for a few days, or if they are calling for assistance while off-site.
Laptop Service - Tech logs in as their *ADM for filevault enabled restart.

Use this option if you are wanting to service the users laptop and require the ability to log in after a restart. This will log the user out and you will log in as your Admin account - similar to if you were logging in to a windows laptop to service it.