

Obligatory “read the article” etc. These unofficial patches get flak because some of them include “features” that are the modders preference. The point of unofficial patches is to fix bugs/glitches while remaining essentially vanilla or at least that’s why people want them. Worth noting that mod devs have been grilled for it before.
Is he doing this with his entra account? Are there any local accounts? Could he just be providing a local admins credentials any time he needs the permission (UAC pop up) but still logged into the Entra ID account? Either way, jump onto (or backstage into) his device and use lusrmgr.msc to check if he’s in the admin group if your sure he’s not an admin in entra. If he is in the admins group (or there’s a dummy account in there he may be using) remove it with the relevant net localgroup command.