How does AutoElevate work?
Learn the fundamentals of AutoElevate.
AutoElevate is comprised of 4 basic components:
-
Agents - and Agent service, which runs on each workstation that you want to manage
- AutoElevate Notification Server - Server which talks to the Agents
-
Web Admin Portal - Console where MSPs can log in to control the system
-
Notification Apps - Android, iOS, and Windows applications that technicians use to receive and respond to client requests from
Agents monitor for UAC (Windows requests for username/password) windows on the client machine. When a UAC window is detected, our agent works quickly in the background to determine the origin of the request, the unique MD5 hash (the "fingerprint" for each application), the computer's security disposition, and information about the request. The Agent replaces the Windows UAC with an interface branded and customized by each MSP. Through that interface, the end user selects whether or not they wish to gain approval for access to what they are attempting to do.
If the end user says "yes" to the AutoElevate dialog box, the request is forwarded to the notification server, which then routes the request to the Notification Apps.
Technicians with the Notification App can quickly and easily evaluate the request and build rules to either accept or deny the requested MD5 hash to be allowed this one time for this computer, location, client, or for the entire MSP practice.
If the end user's request is approved, a notification is sent back to the user's screen, informing them that the request has been granted. It then elevates the request token to administrator privileges, allowing the end user to continue with the installation or action that was requested.
If the request is denied, a ticket is opened for the issue and then communicated to the end user.
UAC events generated from each machine are applied against the set of rules (allow/deny) established by the MSP. The system is designed to allow an MSP to convert admin users to standard users without hampering their productivity while also providing MSPs with a quick way to respond to requests that could otherwise become contentious and time-consuming after the fact.