Endpoint Encryption

Possible to Deploy One Time Password Program or Full Symantec Management Console to my helpdesk engineers without giving them Domain Credentials?

Is there a best practice for going about this that other Institutions have used.

Essentially, I want my techs to be able to to run through password recovery's without issue with a user on the phone, but I don't want them to be messing around with any of the policies in the Symantec Console.

Any ideas?

thank you all

The Greek

yes you can do that ... create a group named helpdesk and add all the users. Then on the see database add this group and give them read / write and execute permissions. Then install the server OTP package on these helpdesk users machine and check if this works

Are you saying create a usergroup in the management console? or an AD Group?

Sorry for any confusion

AD group