I have two technicians who are somehow granting themselves and one other technician admin access to our webhelpdesk. I have repeatedly removed their access, changed my administrator password, even renamed my admin account but they managed to grant themselves access again this week. My supervisor and I are the only two who should have access to the admin account and neither of us are changing the permissions. While we deal with the personnel issue, can someone help me understand if there is another way they are obtaining the admin password? We are running version 12.5 and host it in house on a VM windows server. The two techs do have admin access to the server so I suspect they are somehow modifying the database. I've tried looking for security logs and didn't find any.
Any help would be great. I'm pretty new to WHD and am still getting up to speed.