Skip to main content

Avoid Pop-ups with Admin Approval

You might find that end users report that the Admin Approval pop-up appears even if they do not click on anything.

NOTE: See the Understand "Enforce Admin Approval for all installers" behavior video to learn how to avoid pop-ups with Admin Approval.

This will generally happen when two things are true:

  • Enforce Admin Approval for all installers is set, as explained earlier.
  • An application is already installed and attempting to perform an auto-update.

When an application is detected as an installer, even if a user doesn’t click on it, pop-ups may still come up.. Two examples of pop-ups that users might see, OneDrive and Java, are shown here.

![A screenshot of a computer

Description automatically generated](/img/product_docs/endpointpolicymanager/endpointpolicymanager/leastprivilege/adminapproval/avoid_pop_ups_with_admin_approval.webp)

There are two ways to overcome these messages:

Step 1 – Disable the product’s auto-update feature.

Step 2 – Create a Endpoint Policy Manager Least Privilege Manager rule to elevate the update program to permit the install to occur correctly.

There are two ways to determine which product and command line are triggering the Admin Approval, which we'll discuss in the next sections, along with how to make rules to bypass these pop-ups.

Using Endpoint Policy Manager Operational Logs to Find and Overcome Unwanted Pop-ups​

The first way to see which applications are causing unwanted pop-ups is via Endpoint Policy Manager operational logs, as seen here. To find this log, go to Users\<username>\AppData\Local\PolicyPak Least Privilege Manager, and open ppUser_operational.log.

![A screenshot of a computer program

Description automatically generated](/img/product_docs/endpointpolicymanager/endpointpolicymanager/leastprivilege/adminapproval/avoid_pop_ups_with_admin_approval_1.webp)

NOTE: Some applications may have different ways to self-update, possibly calling more than one upgrade application. Thiscould result in more than one pop-up. Be sure you are noting them all before you proceed.

Using Endpoint Policy Manager Event Logs to Find and Overcome Unwanted Pop-ups​

You can get similar information from the Endpoint Policy Manager event logs, which are found in the Application and Services Logs > Endpoint Policy Manager. An event will appear showing canceled dialogs, like the one shown here.

![A screenshot of a computer

Description automatically generated](/img/product_docs/endpointpolicymanager/endpointpolicymanager/leastprivilege/adminapproval/avoid_pop_ups_with_admin_approval.webp)

There is more information on using Event Viewer with Endpoint Policy Manager at the end of this guide, with specific event IDs to search for.