Documentation
Features > Admin Session.
Also known as Session Elevation
Users can double-click the Admin By Request desktop icon or select the icon from tray tools and confirm that they want to initiate an Admin Session.
Any user given full session elevation gets full local admin rights on their system. Full session elevation mode is ideal for situations such as when elevated access to ‘system’ resources such as drivers or printers etc. is required, when a user needs elevation only for a specific amount of time, or when a Developer requires the use of multiple elevated applications.
As with ‘Run As’ mode, everything in the elevation session is audited, so you can see the reason why the person needs the elevation, anything installed, uninstalled, or run. Full Session elevation mode includes the ability to block the elevation of any system files (CMD.EXE etc.) whilst running elevated, and the ability to ‘force terminate’ any elevated processes once the timer has run down.
Admin Session End User Guide:
Stay Up To Date
Latest Blogs
Passing Cyber Essentials Plus With Run As Admin: How We Handle Account Separation
Account separation is one of the harder CE+ requirements to get right. Admin By Request EPM passes it when set up with Run As Admin, approval, and MFA in...
Nation-State Hackers Are Showing What AI-Assisted Attacks Can Do
Nation-state hackers are demonstrating what AI adds to an attack. Their tactics rarely stay exclusive, which should concern businesses of every size.
Beating the 29-Minute Clock: Controls That Slow Lateral Movement Down
CrowdStrike clocked the average breakout time at 29 minutes in 2025. Practical controls help you slow lateral movement and stay ahead of modern attackers.
