How to disable device access control on a computer without a password

[Frak 0]

 

I would like an end user on a single computer they are using to be able to disable device access control without entering a password beforehand. How can this be done?

 

[Marcos 5,458]

Since you want to unlock the feature permanently for a particular user, "override mode" is not an option as it overrides policies only temporarily. Therefore I'd recommend to move the user to a separate group that has no Device Control policy assigned.