Administrative Mode

 

Administrative Mode is an elevated remote session mode in which the operator is granted administrative privileges on the remote PC.

Important: To enable the Administrative Mode, the administrative account credentials (of the remote PC) will have to be provided. This can be done either by the operator or the local user.

Enabling the administrative mode will allow:

Note: The Administrative mode is only available for Windows operating systems.

Please continue with the appropriate section:


Video Tutorial



How to enable Administrative Mode

Step 1

Click on the "Tools" icon in the top bar.


Step 2

Open "Administrative mode" and select "Enable Administrative mode".


Step 3

Enter the credentials of an administrative account on the remote machine and click "Enable".

Note: If you're elevating with Microsoft Entra ID administrator account, you must use azuread\ prefix together with your Microsoft Entra ID username (UserPrincipalName). Example: azuread\tim.thomas@mydomain.com

Note: If you do not have the credentials, tick the "Ask the remote user to enter the administrator's username and password" box to prompt the remote user to enter the administrative credentials. For further details, continue with: Let the remote user enter admin credentials section.


Step 4

The operator will see the session pause screen, while the remote user approves the UAC window.

Remote side:

The remote user needs to approve this action by selecting "Yes".


Step 5

Administrative Mode is now available. 

Note: You can now enable the Restart and Resume option.


Let the remote user enter admin credentials

To get to this point, please see steps 1-3 of How to enable Administrative Mode.

Step 1

Tick the "Ask the remote user to enter the administrator's username and password" box and click "Enable".


Step 2 (remote user)

The remote user will be prompted to enter administrative credentials. 

In case the remote user checks the option "I will enter the computer's username and password in UAC dialog", please see section How to let the remote user control UAC.


Step 3 (remote user)

The remote user approves this action with "Yes".

Local user view:

The operator is presented with a session pause screen, while the remote user approves UAC window.



Let the remote user enter admin credentials - via UAC

To get to this point, please see steps 1-3 of How to enable Administrative Mode.

Step 1 (operator)

Tick the "Ask the remote user to enter the administrator's username and password" box and click "Enable".


Step 2 (remote user)

The remote user needs to select the option "I will enter the computer's username and password in UAC dialog" which will spawn the UAC dialogue for the remote user to enter the administrative credentials.


Step 3 (remote user)

When the option "I will enter the computer's username and password in UAC dialog" was selected the remote user is prompted to enter the password for the admin account via the native UAC dialogue.

Local user view:

At the same time, the operator will see the session pause screen, while the remote user approves the UAC window.

Tags: executive mode, management mode, azure ad, microsoft entra id, microsoft entra

Was this article helpful?