Admin by Request

Overview

Admin By Request (ABR), is a temporary administrator rights solution to allow you to install approved applications and make necessary changes to your computer without needing to be an administrator on the computer, improving University of Idaho's security posture.

 

Benefits of ABR

  • Common applications can be pre-approved for installation even if they require admin privileges - no user ticket to OIT needed.
  • Applications that are repeatedly approved, can be automatically added to the pre-approval list for most users.
  • Applications that are pre-approved to run with admin privileges can do so transparently, without increasing risk of other applications being also run as admin.
  • For low risk areas, users can supply application justification to satisfy compliance and automatically gain access (audit-only mode).
  • Reduced risk across the university from malware, ransomware, and other exploits.

 

How to use ABR

When installing approved applications or updates requiring administrator level of access you will need to right click on the executable (exe) file and select “Run as Administrator”

  • For MSI files, simply opening the application will trigger Admin by Request if needed.

 

[[ add explanation on system tray or desktop options ]]

[[ invitation to request items in Software Center? ]]

[[ audit only mode, or admin rights for low risk systems ]]

Once you have clicked on Run as Administrator you will be prompted for a reason for access. Please provide us with a reason for the elevated access. If applicable please, provide a TDX ticket number if you are already working with OIT, along with the link to the site you downloaded the installation files from.

Once you have submitted the request will be reviewed. 

If your request is approved, you will then receive a prompt to install the application or update.

This will allow you to perform the installation, and/or, update for the task at hand. If ABR does not work please, submit a Software Services ticket and the TSP team will get in contact with you to resolve the issue.

 

Extended Access with ABR

For the times when extended access is needed, please click on the carrot icon down on the taskbar to the left of the clock, and then click on the green circle with a white check mark icon.

A sub menu will appear providing you with several options. For extended access click on Request administrative access.  To uninstall applications, a printer, or modify some computer properties, clock on tools and then the desired sub-menu item.

When selecting Request Administrative Access, a reason for elevated access is required before access is granted.  Please provide a detailed reason for the elevated access, in the field provided.

ABR Tools – Sub-menu:

Uninstall Program: ABR gives you the ability to remove programs quickly. Within tools sub-menu click on Uninstall Program.  A new will appear with the list of programs installed on the computer.  Click on the program to be uninstalled and then click on uninstall.  A prompt requiring a reason for the uninstall is required. Please, note not all programs can be uninstalled.

When using the other sub-menu items, please work with the TSP team ahead of time to ensure the appropriate information is available to make the task at hand as smooth as possible.