We prompt any user regardless of whether they are local/domain admin or not. There are 2 main ways to modify the default behavior and prevent AE from auto intercepting UAC prompts.
The first is on a Computer by Computer basis. If you set the Computer in "Audit" or "Policy" mode (read more about these modes here: System Overview – System Agent – AutoElevate Support Center), our agent will not attempt to prompt the user and they will be able to interact with the UAC, regardless of their user role.
The 2nd way you can modify the default behavior is to use "Technician Mode" and/or "Technician Bypass Mode". These are modes that can be invoked on a machine at any time and can be invoked on the machine itself (no need to login to the Admin Portal and change some setting). As is suggested by the name, they were designed for technicians who, in order to do their job, need to prevent AE from attempting to get approval. To invoke Technician Mode on a machine, you typically press the Ctrl-Alt-A hotkey.
Technician Mode is designed to be used when the current logged in user on the machine is a Standard User. It pops up what is called the "command tray" which gives you the ability to elevate things on-demand, without knowing a local Admin password and by not having to make a Request to yourself. Read more about this here: Technician Mode - 2FA Authentication & Command Tray – AutoElevate Support Center
Technician Bypass Mode (not enabled by default) is designed to be used when the current logged in user on the machine is an Admin or for technicians and vendors who have access to a local Admin password but not AutoElevate. Read more about this here (and how to turn it on): Technician Bypass Mode - Technician Mode Authentication Setting – AutoElevate Support Center
Comments
0 comments
Please sign in to leave a comment.