Admin By Request

Uploaded Image (Thumbnail)
 





Admin By Request is a software used to control local administrator access on user machines to improve security and to provide iTech with additional user access logs for troubleshooting and review.

When a user needs administrative rights to install software, run programs that require elevated permissions, or make changes to system settings, Admin By Request will grant that access to the user account when an application is launched using “Run As Administrator”. Admin By Request will then grant temporary admin access to perform that task.

Alternatively, users can also request 1-hour admin sessions in which their user account will be granted administrator access for one hour to perform tasks requiring administrator approval, without having to make multiple elevation attempts to Admin By Request. Admin By Request will prompt them to enter their email and a justification/reason* as to why they need the approval. The program will then grant temporary admin access to perform the desired task. 

*The reason field in the Admin By Request 1-hour admin session prompt must have a full description of the justification given for requesting administrator access. Non-descriptive words/statements such as "Work", "installation", "need to install", etc., are not adequate.
The two methods of requesting administrator access with Admin By Request installed, elevation attempt prompt and 1 hour admin session request, are shown below.

 

Admin By Request - Elevation Attempt Prompt

1. Attempt to install a program, access a setting, run a program as an administrator, or perform another task/function requiring administrator approval.

2. ABR will intercept the admin approval request and display a confirmation prompt containing details about the attempt:​​​​​.

3. Click YES to continue:

Uploaded Image (Thumbnail)
3. ABR will grant the necessary privileges to perform the task/function. Once the elevation attempt session is complete, ABR will restore the standard, "user" level access.

4. This process will need to be repeated for each individual elevation attempt needed. If your task/function requires multiple elevation attempts or extended administrator access, you may request a 1-hour administrator session using the process in the next section.

 

Admin By Request - 1 Hour Administrator Session

1. Click the Request administrator access icon (green/white circle with a check) in the system tray of the taskbar, then click Request administrator access. Alternatively, launch the Admin By Request application from the start menu.

Uploaded Image (Thumbnail)
2. ABR will display a prompt to enter details about the attempt. Enter your email address and a detailed reason for requesting access. (The reason MUST be detailed enough to adequately describe the request for security logging purposes.) Click OK/Continue, then click OK at the Code of Conduct prompt.
 
Uploaded Image (Thumbnail)
3. ABR will grant the current user account elevated permissions and will display a countdown timer for 1 hour. Once the timer runs out, ABR will restore standard "user" level access. Once you're done with whatever tasks you needed administrator access for, click Finish, then click Yes at the prompt:

 
Uploaded Image (Thumbnail)

 

 



Admin By Request - More tools


The Windows version of Admin By Request also restricts regular access to certain features/functions such as the Control Panel, Registry Editor, Printer Uninstall, Program Uninstall, etc. To access these, click the Request administrator access icon in the system try, click More Tools, then select the feature/function you'd like to open. Follow the instructions from step 2 in the Admin By Request - Elevation Attempt Prompt section above to enter in the required fields and continue past the prompt to open the feature/function.