Use separate credentials for downloading and installing applications from an alternate location
The current setup allows you to specify what credentials to use to download an installation package from an alternate location. This is helpful for downloading the packages, however, KACE then uses those credentials to attempt to install the package.
The issue is least privileged access. I could easily have a user account setup to only have access to read files on a file share, and then just have KACE install using the system user or a local admin user account. Unfortunately, the current setup requires not only read access to the file share, but also full admin rights on every computer.
2
votes
