How does Privilege Manager change user rights?
Privilege Manager allows users to elevate themselves as needed through the help of an agent installed on the device and a Server in your environment. That way, when the Windows Credential Provider asks for an administrator password, the user can select if they would like to use a temporary local account, or their domain account which is then elevated for the process they were attempting. After the process is completed, the agent returns the account to a normal user account with no additional rights. The exciting thing about Privilege Manager is that you can remove all local administrators from the device, and elevate as needed to complete actions that require elevation.