We have two teams using Remote Support. Customer Support and IT. In the IT team we would like to deploy the Elevation Service to our machines however the problem with this is that the customer support staff would also then be able to get Admin rights on their machines. The Customer support team need to be able to run patches with our customers so I cannot simply disable Elevation for them
To solve this it would be great if you could Allow / Deny Elevation service at group policy / session policy level.