Usage Guide: End User Elevation

When End User Elevation is enabled, users who attempt to run an application as an administrator or install software requiring elevated privileges will be presented with Evo’s User Account Control (UAC) prompt.

The prompt displays the following message:

A text field is provided where the user can enter their reasoning before submitting the request for approval.

Once a request is submitted, the user will see confirmation that their request was submitted. The user can close this window, and it will reappear once the request has been approved or denied.

Upon approval, users will receive a popup notifying them of the approval and prompting them to run the file. If denied, they will see a similar popup notifying them and prompting them to contact the IT team for details.

On the Evo Portal, technicians can locate and review requests by navigating to the respective Tenant and accessing the Elevation → Request section.

From this section, the technician can review the request by clicking on either the application name or the "Review" button.

The Request Details section provides the technician with comprehensive information for review, including the following: Requested By, Request Timestamp, Resolution By, Action, Endpoint, Reason, Resolution Reason.

At the top right of the Request Information page, the technician has the option to approve the request, deny it, or create a new rule.

Upon approval, the technician can choose to create a rule for future requests.

To automate future approvals for similar requests, the technician can select “Create rule from this request.”

Once the rule is created, it will appear in the Rules tab, where it can be edited, enabled, disabled, or deleted as needed. Additionally, the system will display the admin who created the rule for tracking and auditing purposes.

Once the technician approves the request or if the application is already permitted by an existing rule, the user will receive an Elevation Status notification indicating that their request has been approved and prompting them to run it.

Technicians can receive notifications via Evo Authenticator app push notifications or via email.

Refer to our Getting Started: End User Elevation article for details of how to configure notifications.

Note: The Local Policies > Security > User Account Control setting must be set to “Switch to secure desktop when prompting for elevation” for Microsoft Secure Desktop to continue functioning correctly with EUE.

This setting must be disabled and not enforced via GPO to ensure that Evo UAC can operate properly in Secure Desktop mode.

Please reach out to the Support Team at support@evosecurity.com with any questions!