Safeguard Privilege Manager for Windows 4.3 - User Guide

Using the Self-Service Elevation Request Prompt

To request permission to launch an application that requires administrative rights:

1. Visit the site from which you want to download the application and click the installation button. For example, to download the Adobe Shockwave Player, visit http://get.adobe.com/shockwave/ and click the Download now button.

2. Enter the administrator User name and Password if you are prompted.

3. If you do not know the administrator User name and Password, click the No button.
4. A Self-Service Elevation Request Prompt will open, allowing you to request permission to launch the application.
   

   1. If the prompt does not display for an ActiveX installation, ensure that the Self-Service Elevation Request (ActiveX installations) feature is enabled in the Viewing the status of advanced features window.

   2. If the prompt does not display for an application that is not an ActiveX installation, ensure that the Self-Service Elevation Request feature is enabled in the Viewing the status of advanced features window.

   3. Contact your administrator if neither features are enabled.

5. Enter the reason you need the application along with an email address (if this feature is enabled) where the system administrator can respond to your request.

6. If it displays, check the In the future, don't show me this when I try to run applications that need approval checkbox if you don't want the Self-Service Elevation Request Prompt to display automatically every time you don't know the administrator User name and Password. To set the prompt to display again, follow the instructions for Displaying the Self-Service Elevation Request Prompt.

7. Click Submit to send your request to the system administrator.

   1. The system administrator will review your request and send you the final decision.
   2. If the system administrator confirms your request, a new privilege elevation rule will be created that allows you to launch the application when you re-login into your computer. For more information, see Viewing rules.

Displaying the Self-Service Elevation Request Prompt

A Self-Service Elevation Request Prompt may display when you try to launch an application without entering the administrator User Name and Password when prompted.

If the prompt does not display, you may be able to reset it to display so that you can request permission to launch the application.

To reset the Self-Service Elevation Request Prompt to display:

1. Right-click the client icon in the notification area of the taskbar at the bottom of your computer screen.

   

2. Select Display Self-Service Prompts on the pop-up menu.

   

Using the Elevate! button and Self-Service Elevation Request Form

If you do not have administrative rights to launch an application, you can use the Elevate! button to open the Self-Service Elevation Request Form and request permission from your system administrator.

You can use the Elevate! button if the filename extension, the suffix after the dot in the filename, for the application you need to install is .bat, .cmd, .exe, .js, .lnk, .msc, .msi, .msp, .pl, .ps1 or .vbs.

To request permission to launch an application that requires administrative rights:

1. On your list of files in Windows Explorer, right-click on the name of the application that you cannot start because you do not have sufficient privileges.
2. Select Elevate! on the pop-up menu that will display.

3. A Self-Service Elevation Request Form will open, allowing you to request permission to launch the application.

   

   If the form does not display, ensure that the Self-Service Elevation Request (Elevate! context menu button) feature is enabled in the Viewing the status of advanced features window.

4. Enter the reason you need the application along with an email address (if this feature is enabled) where the system administrator can respond to your request.

5. Click Submit to send your request to the system administrator.

   1. The system administrator will review your request and send you the final decision.
   2. If the system administrator confirms your request, a new privilege elevation rule will be created that allows you to launch the application when you re-login into your computer. For more information, see Viewing rules.

Using instant elevation

You may be able to use the Elevate! button to automatically launch programs, if your system administrator has set up the instant elevation feature for your computer. For more information about your permissions, contact your system administrator.

You can use the Elevate! button if the filename extension, the suffix after the dot in the filename, for the application you need to install is .bat, .cmd, .exe, .js, .lnk, .msc, .msi, .msp, .pl, .ps1 or .vbs.

To automatically launch a program using instant elevation:

1. On your list of files in Windows Explorer, right-click on the name of the application that you cannot start because you do not have sufficient privileges.
2. Select Elevate! on the pop-up menu that will display.

If the Elevate! button does not appear when you try to launch a program:

1. Ensure that the Instant Elevation feature is enabled in the Viewing the status of advanced features window.
2. Ensure that the filename extension for the application is .bat, .cmd, .exe, .js, .lnk, .msc, .msi, .msp, .pl, .ps1 or .vbs.
3. Contact your system administrator to confirm that your account has permission to elevate privileges on your computer.

Using temporary session elevation

If your system administrator has provided you with a TSE (Temporary Session Elevation) passcode for your computer, you will be able to temporarily use the Elevate! button to automatically launch programs that require elevated privileges.

1. From the System Tray, right-click the Privilege Manager client and select Temporary session elevation.

   

   
   

2. The TSE Client Request dialog will be displayed.
   

   

   
   
3. If your Administrator has already supplied you with a passcode, Load passcode from file can be selected. If you do not have a passcode click on If you don’t have a passcode you can request one... The request for elevation passcode dialog will be displayed.

   

   
   

4. Complete the request form and click Submit.
5. Once the passcode is entered, a notification will appear showing how much time before the elevation expires. A notification will appear when the passcode expires. If the passcode has already been used the maximum number of times you will receive a notification.

Once a passcode is active, you can use the right-click Elevate! button if the filename extension, the suffix after the dot in the filename, for your application you need to install is .bat, .cmd, .exe, .js, .lnk, .msc, .msi, msp, .pl, .psl or .vbs.

To automatically launch a program while a passcode is active:

1. On your list of files in Windows Explorer, right-click on the name of the application that you cannot start because you do not have sufficient privileges.
2. Select the Elevate! button on the pop-up menu that displays.

If the Elevate! button does not appear when you try to launch a program:

1. Ensure that the Temporary Session Elevation feature is enabled.
2. Ensure that the filename extension for the application is one of the following: .bat, .cmd, .exe, .js, .lnk, .msc, .msi, msp, .pl, .psl or .vbs.
3. Contact your system administrator to confirm that your account has permission to elevate privileges on your computer.