Active Directory - Installing Software

Once your Windows computer is signed in to Active Directory, you may be prompted for "Administrator Rights" when you install new software or update certain packages. This is to ensure that malicious software is not installed in the background without your consent or knowledge.

For business-related software, you have a number of options for installing software that requires administrator rights:

  • Install from the Microsoft Software Center
  • Request Elevated Rights (Temporary or Permanent)
  • Work with your unit IT professionals

Install software from the Microsoft Software Center

A number of University business applications and updates are available through the AD Software Center service and can be installed by the user with no additional rights, including:

  • Adobe Acrobat Professional
  • Cisco AnyConnect (VPN)
  • Firefox
  • Google Chrome
  • Google Drive
  • Java (JRE Enterprise License)  Note: Available by request only
  • Microsoft Office
  • Perceptive Content   Note: Available by request only

To install SCCM software:

  1. Open the SCCM Software Center:
    Windows 10: Click on the Windows button in your toolbar.
    Screenshot of Windows Button

    In the search bar, type Software Center and a best match option will show up that you can click on.
    Search screen shot
  2. The software center opens. Click on the item you would like to install.
    Download Screen shot
  3. Click the install button. You will get an installing message and when it is complete, the button will turn to an option to uninstall.
    Install Button
  4. Your install is now complete!

Request Elevated Access Rights for your account

Access rights for computers in our Active Directory setting are set to "User" by default, which (by design) limits the user's ability to update or configure the computer. This user access level provides the best data security and is required for any computers/users that access Private Highly Restricted data (Health Services, Medical School, any PCI workstations). Users that fall into this category should contact their local IT professional for assistance in updating their computers (installing or updating software adding printers, etc.).

Users/computers that do not fall into the Private Highly Restricted data category have two options available if they want to personally update their University computer:

  • Request temporary elevated rights
    • Temporary admin rights are granted to the specific user/computer and expire at the beginning of the next business day. This provides users a window of time to install or update software or printers, while maintaining the basic security of the computer.
    • This service is available during business hours (8:00-4:30 am, Mon-Fri).
    • To request Temporary Elevated Access Rights:
      1. Fill out the online form: Elevate Rights in AD OR
      2. Call the ITSS TechCenter Help Desk (x8847) and request "Elevated Access Rights" for your account.
      3. You will receive an email when your account has been granted temporary administrator rights. Follow the instructions in the email to sign in and complete your task. If you are off-campus, follow the procedures to sign in to VPN first.

  • Request permanent elevated rights
    • Permanent admin rights are granted to the specific user/computer through the use of the User Access Control (UAC) feature of Windows 10. Once granted, when the user is completing tasks that can be done as a standard user (such as reading e-mail, listening to music, or creating documents), they have the permissions of a standard user. When changes are going to be made to the computer that require administrator-level permission (installing software, updating printer drivers), the user receives a UAC prompt to sign in with their regular University Internet credentials (username and password) and they're able to continue. This change allows users to maintain the advantages of AD (security updates, file sharing, printing) and still maintain control over updating and installing software, etc.
    • Permanent Elevated Access Rights are not available for users/computers that access Private Highly Restricted Data.
    • To request Permanent Elevated Access Rights:
      1. Fill out the online form: Elevate Rights in ADand specify "Permanent" OR
      2. Call the ITSS TechCenter Help Desk (x8847) and request "Permanent Elevated Access Rights" for your account.
      3. An ITSS staff person will contact you to schedule a time to complete the change on your computer.

    If you have questions about access rights, please contact your local IT support staff or the ITSS Help Desk.

    Request assistance from your department or collegiate technical support staff

    Technical support staff across campus have been provided with elevated-access workstation administrator accounts that enable them to provide extended technical support to their units. Contact your local IT professional for assistance.