
Documentation
Also known as Session Elevation
Users can double-click the Admin By Request desktop icon or select the icon from tray tools and confirm that they want to initiate an Admin Session.
Any user given full session elevation gets full local admin rights on their system. Full session elevation mode is ideal for situations such as when elevated access to ‘system’ resources such as drivers or printers etc. is required, when a user needs elevation only for a specific amount of time, or when a Developer requires the use of multiple elevated applications.
As with ‘Run As’ mode, everything in the elevation session is audited, so you can see the reason why the person needs the elevation, anything installed, uninstalled, or run. Full Session elevation mode includes the ability to block the elevation of any system files (CMD.EXE etc.) whilst running elevated, and the ability to ‘force terminate’ any elevated processes once the timer has run down.
Admin Session End User Guide:
Stay Up To Date
Latest Blogs
How to Tell Users They’re Losing Admin Rights
Breaking the news that you’re removing local admin rights from your users’ workstations is never going to be popular. Users who’ve grown comfortable with unlimited system access won’t exactly...
SIM Swapping and MFA Bombing: How Attackers Beat Two-Factor Authentication
MFA is effective against automation, but targeted attacks like MFA bombing and SIM swaps are exposing its human-centered weaknesses.
Microsoft SharePoint Exploits Now Used for Ransomware Attacks
Warlock ransomware deployed via SharePoint vulnerabilities. Find out how attackers gain access, steal keys, and lock down systems.