Skip to main content

Avoid Pop-ups with Admin Approval

You might find that end users report that the Admin Approval pop-up appears even if they do not click on anything.

note

See the Understand "Enforce Admin Approval for all installers" behavior video to learn how to avoid pop-ups with Admin Approval.

This will generally happen when two things are true:

  • Enforce Admin Approval for all installers is set, as explained earlier.
  • An application is already installed and attempting to perform an auto-update.

When an application is detected as an installer, even if a user doesn’t click on it, pop-ups may still come up.. Two examples of pop-ups that users might see, OneDrive and Java, are shown here.

A screenshot of a computer Description automatically generated

There are two ways to overcome these messages:

Step 1 – Disable the product’s auto-update feature.

Step 2 – Create a PolicyPak Least Privilege Manager rule to elevate the update program to permit the install to occur correctly.

There are two ways to determine which product and command line are triggering the Admin Approval, which we'll discuss in the next sections, along with how to make rules to bypass these pop-ups.

Using PolicyPak Operational Logs to Find and Overcome Unwanted Pop-ups​

The first way to see which applications are causing unwanted pop-ups is via PolicyPak operational logs, as seen here. To find this log, go to Users\<username>\AppData\Local\PolicyPak Least Privilege Manager, and open ppUser_operational.log.

A screenshot of a computer program Description automatically generated

note

Some applications may have different ways to self-update, possibly calling more than one upgrade application. Thiscould result in more than one pop-up. Be sure you are noting them all before you proceed.

Using PolicyPak Event Logs to Find and Overcome Unwanted Pop-ups​

You can get similar information from the PolicyPak event logs, which are found in the Application and Services Logs > PolicyPak. An event will appear showing canceled dialogs, like the one shown here.

A screenshot of a computer Description automatically generated

There is more information on using Event Viewer with PolicyPak at the end of this guide, with specific event IDs to search for.