Body
This article will show you how to use Microsoft Endpoint Privilege Management (EPM) in campus Public Windows Computer labs.
Students and faculty sign in as standard users for security, but some apps need extra permissions.
EPM lets you temporarily elevate an app without an administrator.
Before You Start
-
EPM can only elevate the following file types:
-
.exe – application installers
-
.msi – Windows installers
-
.ps1 – PowerShell scripts
-
If the elevation option doesn’t appear or your file type isn’t supported (e.g., .zip, .bat, drivers), reach out to the CIT HelpDesk.
-
Drivers cannot be elevated by EPM. If you need a driver installed or updated, contact the CIT HelpDesk.
How to Elevate an App Using EPM
-
Open the Start Menu and locate the app you want to run.
-
Right-click the app and Choose “Run with elevated access.” 
-
A Microsoft EPM pop-up window will appear, click continue. 
-
Sign in with your SUNY Geneseo email and password. 
-
The app will open with admin rights
You can now install, update, or run the tool as needed.
You will need to repeat these steps each time you need elevated access for that app.
Still Need Help?
Ask CIT! 📞 (585) 245-5588 | 📧 Email | 💬 Chat | 📝 Submit a Request and we'll be happy to assist you.