Installing and Updating Software on Emerson Windows Computers

June 08, 2026 20:45

Emerson College Windows computers run with standard user permissions rather than local administrator rights, following the security principle of least privilege. This reduces the risk of malware and ransomware, which usually rely on elevated permissions to spread.

Instead of an admin account, use Software Center for Emerson's standard pre-approved titles, and use Endpoint Privilege Management (EPM) for software installations that require administrator rights.

Installing software from Software Center

Software Center lets you install commonly used, approved applications on your own, without administrative privileges or contacting the Help Desk. Start here for most software.

Opening Software Center

Type software center in the search box on the Windows taskbar, then click Software Center in the results.

The Windows taskbar search panel with 'software center' typed in the search box and the Software Center desktop app shown at the top of the results under Best match. — Software Center in the taskbar search results.

Browsing and installing an application

Browse the Applications list, or use the search box in the upper-right corner to find a specific title, then click the application you want.

The Software Center window open to the Applications tab, showing a grid of installable application tiles, each with an icon and name, and a search box in the upper-right corner. — The Applications catalog of available titles.

On the application's page, click Install. Software Center downloads and installs it for you. Larger applications may take a few minutes, and you can keep working while the installation runs.

A Software Center application detail page showing the application's name, publisher, and description, with a blue Install button near the top left. — The application detail page, with the Install button near the top left.

Installing software that needs elevated access (EPM)

Some installers are not in Software Center and need administrator rights to run. Endpoint Privilege Management (EPM) lets you run a specific installer with administrator privileges without having a local admin account. Depending on Emerson IT policy for the application, access is either granted automatically or sent to IT for approval. The steps to start are the same in both cases.

Start the installation

In File Explorer, right-click the installer you downloaded (for example a setup .exe file) and choose Run with elevated access. EPM adds this option, marked with a shield icon, and it is separate from the standard Run as administrator.

A Windows File Explorer right-click context menu for an installer file, with the 'Run with elevated access' option highlighted among the menu choices and marked with a shield icon. — The "Run with elevated access" option, separate from "Run as administrator."

An Endpoint Privilege Management dialog opens. What happens next depends on policy for that application.

If the application is already approved

EPM shows a confirmation dialog right away, listing the application name, version, and verified publisher, and noting that the action will be logged and sent to Emerson IT. Click Continue to launch the installer with elevated access. The installation then runs normally.

An Endpoint Privilege Management confirmation dialog stating that administrator access is available. It lists the application name and version and the verified publisher, notes that the action will be logged and sent to your IT administrator, and shows Continue and Cancel buttons. — The confirmation dialog shown when the application is pre-approved.

If you need to request approval

If the application is not pre-approved, EPM asks for a business justification first. Type the reason you need the software (up to 280 characters), being specific, for example: "Required to complete client project X, approved by manager Jane Smith."

An Endpoint Privilege Management dialog titled 'Enter your business justification,' containing a multi-line text field for your reason of up to 280 characters and a Send button. — The business justification dialog.

You may be asked to confirm your identity with Windows Hello or your password. Click Send to submit, then Close and wait for IT to review. You'll receive a Windows notification once a decision is made.

An Endpoint Privilege Management confirmation reading 'Request sent,' telling you that your IT team has been notified and that you will be notified when a decision is made, with a Close button. — The "Request sent" confirmation.

⏱️

Approval times vary. Most requests are reviewed within one business day. If you need access urgently, contact the Help Desk and reference your EPM request.

After your request is approved

When IT approves your request, you'll receive a Windows notification from the Microsoft Intune Management Extension. Go back to the installer in File Explorer, right-click it, choose Run with elevated access again, and click Continue in the confirmation dialog to install.

A Windows toast notification from Microsoft Intune Management Extension confirming that your elevated access request has been approved. — The notification confirming your request was approved.

💡

Approvals are valid for 24 hours. Run the installer as soon as you receive the approval notification. If the window expires, submit a new request.

If you still can't install what you need

If an application is not in Software Center and does not work with elevated access, contact the Help Desk at (617) 824-8080 or helpdesk@emerson.edu. Emerson IT is also developing additional options that will let you request temporary access to install software when appropriate.

Frequently asked questions

Why can't I just use "Run as administrator"?

Standard administrator rights are turned off on managed devices for security. EPM gives you a controlled, audited way to elevate a specific application without granting permanent admin access.

Will IT see what I installed?

Yes. Every EPM action, including which application was run, your business justification, and the result, is logged and sent to Emerson IT for audit purposes.

My request was denied. What should I do?

You'll receive a notification if a request is denied. Contact the Help Desk to learn the reason and discuss alternatives, such as an approved version of the software.

I don't see "Run with elevated access" in the menu.

This option only appears for applications EPM is set up to manage. If it is missing, the application may not be covered by your current policy. Contact the Help Desk for help.