preloader
UNYK

Elevator for Windows

Run legacy and specialist Windows apps with admin rights – while users stay standard. Elevator is a lightweight Windows utility that automatically elevates just the applications you approve. Your users keep running as standard users, your legacy apps still work, and you finally have a practical way to move toward least privilege without breaking people’s day jobs.

Start Free Trial Talk to us about your environment

Who Elevator is for

IT Teams

Security

MSPs / Service Providers

The problem Elevator solves

Most organisations know they should remove local admin rights on Windows. Then reality shows up:
  • Older apps that “only work as admin”.
  • Installers and updaters that silently expect elevation.
  • Developers and power users who default to running everything as admin.
  • IT teams sharing local admin passwords to get around UAC prompts.
You end up with a long tail of exceptions and a lot of users staying local admins “just in case”. That makes every phishing email, Office zero-day, and vulnerable utility (Samsung Magician, WinRAR, and friends) much more dangerous than it needs to be. Elevator breaks that deadlock.

How Elevator works

At a high level, Elevator does three simple things:
  1. Users stay standard. Users log on with normal, non-admin Windows accounts.
  2. You define which apps can run elevated. In the Elevator config, you specify the executables / paths that should run with admin rights.
  3. Elevator elevates just those apps. When a user launches an approved app, Elevator runs it with admin rights in the background and logs the event.
No extra UI for users, no new passwords to type. Their existing Start menu shortcuts and desktop icons just work.

Start Free Trial

Benefits for your team

Security

  • Reduce the number of full-time local admins across your estate.
  • Limit what attackers can do if they land on a user’s device.
  • Bring legacy and specialist apps into a controlled elevation model instead of “whatever the installer wants”.

IT operations

  • Fewer “please type the admin password” tickets.
  • No more ad hoc scripts or one-off hacks to make individual apps work.
  • A clean, auditable story when security or audit ask “who is using admin rights and why?”.

End-user experience

  • Users run their apps as usual – no new tools to learn.
  • Legacy apps work without needing full local admin all day.
  • Less friction when you roll out changes like Windows 11 Administrator Protection or Intune Endpoint Privilege Management.
Start Free Trial

Getting started

  1. Pick 2–3 legacy or specialist apps that currently force you to keep users as local admins.
  2. Download the Elevator trial and deploy it to a small pilot group.
  3. Create allow-rules for those executables and validate that standard users can run them successfully.
  4. Expand the rollout and start removing local admin rights where those apps are covered.
Start Free Trial Ask a question

Frequently asked questions

Does Elevator replace local admin completely?

No. You will still have a small number of true admin accounts for IT and break-glass scenarios. Elevator is there so regular users don’t need to be local admins just to run one or two applications.

Does Elevator change the user experience?

For most users, no. They click the same shortcuts they already use. Approved apps run with the rights they need, others run as normal standard-user processes.

How is this different from just giving users a second admin account?

With a second admin account, users can (and do) run entire sessions as admin. Malware and misconfigurations inherit those rights. Elevator elevates only the approved apps, keeps users out of the local Administrators group, and gives you an audit trail.

What versions of Windows are supported?

Elevator is designed for supported business versions of Windows 10 and Windows 11 (on domain-joined or Intune-managed devices). If you have a specific scenario you’d like to check, contact us and we’ll be happy to talk it through.

How much does Elevator cost?

Pricing depends on the number of endpoints and whether you’re using Elevator across multiple customers (for MSPs). Use the quote form and we’ll send you simple, transparent pricing.