IP Library Granted Patent US 12676862
Granted Patent B2
US 12676862 · App. 18/193,974 · Granted Jul 7, 2026

Systems and methods for anonymous administrative login

Inventors: Jacob Hamilton Morgan (Raleigh, NC); Berry Mayfield Reynolds, IV (Raleigh, NC)
Assignee: ConnectWise, LLC
H04L63/105G06F9/452G06F21/6254H04L63/102
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12676862
App. No.
18/193,974
Granted
Jul 7, 2026
Kind
B2
Abstract

Systems and methods for end user elevation and anonymous administrative login are disclosed. An agent executing on a client device can provide a graphical element within a user interface presented by the client device upon detection of a request for elevated user privileges. Upon an interaction with the graphical element, the agent transmits, to a server, data corresponding to the request for elevated user privileges, and receives, from the server, a message indicating approval of the request for elevated user privileges. The agent provides, to the operating system of the client device, an indication that the request for elevated user privileges is approved.

Claims (33)

1 . A method, comprising:

determining, by an agent executing on a client device, that a remote desktop session is actively controlling functionality of the client device;

providing, by the agent, a graphical element within a user interface presented by an operating system of the client device responsive to detection of a request for elevated user privileges via the remote desktop session;

determining, by the agent, an identifier of a remote computing device that is utilizing the remote desktop session to control the client device;

responsive to an interaction with the graphical element, transmitting, by the agent to a server, data corresponding to the request for elevated user privileges and the remote desktop session, the data comprising the identifier of the remote computing device and an identifier of a remote user profile used to initiate the remote desktop session;

receiving, by the agent from the server, a message indicating approval of the request for elevated user privileges; and

providing, by the agent to the operating system of the client device, an indication that the request for elevated user privileges is approved.

2 . The method of claim 1 , further comprising:

determining, by the agent, that the remote desktop session is not actively controlling functionality of the client device; and

providing, by the agent, an indication not to display the graphical element within a second user interface provided by the operating system responsive to detection of a second request for elevated user privileges.

3 . The method of claim 1 , wherein determining that the remote desktop session is actively controlling functionality of the client device comprises accessing, by the agent, information stored on the client device that indicates the remote desktop session is active.

4 . The method of claim 1 , further comprising generating, by the client device, an entry identifying the agent in a registry of the operating system.

5 . The method of claim 1 , further comprising determining, by the agent, one or more of a program name of a program executed by the client device that initiated the request for elevated user privileges, a publisher of the program, a file path identifying a storage location of the program, or a file hash of the program.

6 . The method of claim 1 , wherein the message comprises an authentication credential for the operating system that is generated for the remote desktop session, and providing the indication that the request for elevated user privileges is approved comprises providing the authentication credential to the operating system.

7 . The method of claim 1 , further comprising storing, by the client device, the agent in memory of the client device as a dynamic library.

8 . The method of claim 1 , wherein determining that the remote desktop session is actively controlling functionality of the client device comprises determining that the remote desktop session initiated the request for elevated user privileges.

9 . A system, comprising:

a client device that executes an agent that:

determines that a remote desktop session is actively controlling functionality of the client device;

provides a graphical element within a user interface presented by an operating system of the client device responsive to detection of a request for elevated user privileges via the remote desktop session;

determines, by the agent, an identifier of a remote computing device that is utilizing the remote desktop session to control the client device;

responsive to an interaction with the graphical element, transmits, to a server, data corresponding to the request for elevated user privileges and the remote desktop session, the data comprising the identifier of the remote computing device to the server and an identifier of a remote user profile used to initiate the remote desktop session;

receives, from the server, a message indicating approval of the request for elevated user privileges; and

provides, to the operating system of the client device, an indication that the request for elevated user privileges is approved.

10 . The system of claim 9 , wherein the agent further:

determines that the remote desktop session is not actively controlling functionality of the client device; and

provides an indication not to display the graphical element within a second user interface provided by the operating system responsive to detection of a second request for elevated user privileges.

11 . The system of claim 9 , wherein the agent further determines that the remote desktop session is actively controlling functionality of the client device by accessing information stored on the client device that indicates the remote desktop session is active.

12 . The system of claim 9 , wherein the agent further generates an entry identifying the agent in a registry of the operating system.

13 . The system of claim 11 , wherein the agent further determines one or more of a program name of a program executed by the client device that initiated the request for elevated user privileges, a publisher of the program, a file path identifying a storage location of the program, or a file hash of the program.

14 . The system of claim 11 , wherein the message comprises an authentication credential for the operating system that is generated for the remote desktop session, and the agent further provides the indication that the request for elevated user privileges is approved by providing the authentication credential to the operating system.

15 . The system of claim 9 , wherein the client device further stores the agent in memory of the client device as a dynamic library.

16 . The system of claim 9 , wherein the agent further determines that the remote desktop session is actively controlling functionality of the client device by determining that the remote desktop session initiated the request for elevated user privileges.