Skip to main content

K-Elevate

No more permanent administrator rights

K-Elevate removes administrator rights from everyday use and grants them when they are useful: for a specific application or for a short session, with a reason and a trace.

The problem

A user who is an administrator of their own computer hands any malicious program the keys to the machine. Removing these rights without blocking work is one of the most effective steps.

What the module does

  • Request with a reason

    The user requests elevation from the agent, stating a reason.

  • By application or by session

    Only the approved program runs as administrator, or a time-limited session.

  • Automatic rules

    Trusted signed publishers can be approved automatically.

  • Local administrator under control

    A unique password per computer, renewed after use and stored encrypted.

How it works

  1. Request

    The user clicks “Run as administrator” and gives a reason.

  2. Approval

    Automatic rule or validation from the console.

  3. Revocation

    The rights disappear automatically at the end.

What you should know

  • The module is planned for phase 4; rotation of the local administrator password is in development.
  • macOS support will follow Windows.

Frequently asked questions

Questions about this module

Will users be blocked?

Deployment starts in observation mode, to identify real needs before rights are removed.

Want to try this module?

The pilot programme gives you access to modules as they are delivered, free of charge and with no commitment.