Any ideas on how I can convince my boss to not require users to give us their passwords?

I just recently got a new IT job and their internal security is awful. Two ways are that everybody had local admin rights (which I was able to convince them to change) and they are required to give us their password when we need to work on their laptop since the laptops are assigned to each person and we need to login to their account to make configurations on their account. I am trying to tell them we could just …

admin admin rights boss can change cybersecurity ideas internal job local local admin rights password passwords rights security