Active Directory - Access Rights

Computer Management


You are here

Access rights for computers in our Active Directory setting are set to "User" by default, which (by design) limits the user's ability to update or configure the computer. This user access level provides the best data security and is required for any computers/users that access Private Highly Restricted data (Health Services, Medical School, any PCI workstations).  Users that fall into this category should contact their local IT professional for assistance in updating their computers (installing or updating software,  adding printers, etc.).

Users/computers that do not fall into the Private Highly Restricted data category have two options available if they want to personally update their University computer.

Request Temporary Elevated Access Rights

Temporary admin rights are granted to the specific user/computer and expire at the beginning of the next business day. This provides users a window of time to install or update software or printers, while maintaining the basic security of the computer.

This service is available during business hours (8:00-4:30 am, Mon-Fri).

To request Temporary Elevated Access Rights:

  • Fill out the online form: Elevate Rights in AD OR
  • Call the ITSS TechCenter Help Desk (x8847) and request "Elevated Access Rights" for your account.

You will receive an email when your account has been granted temporary administrator rights. Follow the instructions in the email to sign in and complete your task. If you are off-campus, follow the procedures to sign in to VPN first.

Request Permanent Elevated Access Rights

Permanent admin rights are granted to the specific user/computer through the use of the User Access Control (UAC) feature of Windows 7/8/10. Once granted, when the user is completing tasks that can be done as a standard user (such as reading e-mail, listening to music, or creating documents), they have the permissions of a standard user. When changes are going to be made to the computer that require administrator-level permission (installing software, updating printer drivers), the user receives a UAC prompt to sign in with their regular University Internet credentials (username and password) and they're able to continue. This change allows users to maintain the advantages of AD (security updates, file sharing, printing) and still maintain control over updating and installing software, etc.

Permanent Elevated Access Rights are not available for users/computers that access Private Highly Restricted Data.

To request Permanent Elevated Access Rights:

  • Fill out the online form: Elevate Rights in AD and specify "Permanent" OR
  • Call the ITSS TechCenter Help Desk (x8847) and request "Permanent Elevated Access Rights" for your account.

An ITSS staff person will contact you to schedule a time to complete the change on your computer.

If you have questions about access rights, please contact your local IT support staff or the ITSS Help Desk.