Starting from Privilege Manager client version 3.0.5000 the whole temporary user account activation process can be done directly from credential provider. The Privilege Manager administrator can limit self-service on for specific users (like service desk personnel) and then users activating temporary user accounts must specify their own domain account credentials to use self-service.
When actions requiring administrator level permissions are executed or users select Run as different user to execute an action Windows by default shows the User Account Control window where credentials are provided to execute the action. This User Account Control has the Privilege Manager option when the Privilege Manager credential provider has been installed on the client.
In the User Account Control dialog, click More choices to show the Privilege Manager credential provider.
1. Click Recast Privilege Manager to select the Privilege Manager credential provider.
2. Select Run with local account from the dropdown list.
3. If more than one temporary user account is available, select the desired temporary account.
4. Specify the reason a temporary account is required.
5. Check Use alternative credentials to specify user account credentials who have permissions to use self-service.
6. Specify alternative credentials and use a pre-windows 2000 account format for the user account.
7. Click Yes.