Elevated Access on Windows Labs via EPM for Run Apps
This article will show you how to use Microsoft Endpoint Privilege Management (EPM) in campus Public Windows Computer labs.
Students and faculty sign in as standard users for security, but some apps need extra permissions.
EPM lets you temporarily elevate an app without an administrator.
⚠️Before You Start
EPM can only elevate the following file types:
.exe– application installers.msi– Windows installers.ps1– PowerShell scripts
If the elevation option doesn’t appear or your file type isn’t supported (e.g., .zip, .bat, drivers), reach out to the CIT HelpDesk.
Drivers cannot be elevated by EPM. If you need a driver installed or updated, contact the CIT HelpDesk.
✅ How to Elevate an App Using EPM
Open the Start Menu and locate the app you want to run.
You can also right-click the app if it’s on the Desktop.
Right-click the app and Choose “Run with elevated access.”
A Microsoft EPM pop-up window will appear, click continue.
Sign in with your SUNY Geneseo email and password.
The app will open with admin rights
You can now install, update, or run the tool as needed.
You will need to repeat these steps each time you need elevated access for that app.