baanjaiElevation,
reimagined.
Admin access, approved in one click. No standing admins, no shared passwords — just the right access, exactly when it’s needed, and gone the moment it’s used.
Request, approve, and audit every elevation in real time.
On Windows today — macOS and Linux coming soon.
People in line
312liveApply for the betaRefer friends to jump the line.
Your email is never sold or used for advertising.
Try an elevation, start to finish.
The exact Windows prompt your people see, and the console where a technician approves it. Request access on the device, approve it as the technician, and watch admin appear for one action — then vanish.
↑ Click “Request admin approval from technician” on the prompt.
Interactive demo · everything shown is part of the baanjai platform.
Retire the shared admin password.
Standing local admin and a password everyone knows is the old way. baanjai turns every admin moment into a request you can see, decide, and trust.
- A shared admin password everyone reuses
- Standing local admin on every machine
- Help-desk tickets and waiting around
- No real record of who elevated what
- Single-use approval, no password to share
- Zero standing admin — access only for the action
- Decisions in seconds, from a live queue
- Every elevation recorded automatically
From “I need admin” to done — in seconds.
The same simple flow for the person asking and the person deciding.
Someone needs admin
Right when Windows asks for an admin password, they click “Request access” — no phone call to IT, no password to share, no being stuck.
You decide — live
The request lands in your queue with who asked, which machine, the exact app, and an automatic safety check. Approve, deny, or revoke in one click — or let a rule you’ve set decide instantly.
Access appears, then vanishes
Admin rights are granted for that one action and stripped the moment it’s done. Nothing stays elevated — and every elevation is recorded.
Far more than a prompt.
Elevation is the heart of it — and the rest of your day-to-day comes along, every machine in one place.
Live approval queue
Every request lands the instant it’s made — who asked, which machine, which app. Approve, deny, or pull it back, and the answer reaches them in real time.
One click, right when Windows asks
People ask at the exact moment Windows would demand an admin password — and never see one, or need one.
Zero standing admin
No always-on local admins. No shared password making the rounds. Access lives for the moment of the action and not a minute longer.
Trust once, everywhere
Bless an app a single time and it’s trusted on every machine, for everyone, with no more clicks. Change your mind and the next prompt asks again.
Watch before you decide
See every admin moment as it happens, and shape your rules from what really occurs — before you change a single thing.
Malware, stopped at the gate
Every request is checked against known-bad software, so the wrong thing is flagged — and blocked — before it can ever run as admin.
Every machine, at a glance
The whole fleet on one screen — online or offline, by team and place, with what’s inside each one — always current, never a refresh.
Take the wheel, remotely
Drop onto any machine in a click to see what they see and put it right — then your way in disappears the moment you step off.
A line to whoever’s there
Reach the person at the keyboard straight from the console — a friendly window slides up on their screen, with nothing for them to install.
Printers, finally painless
Set a company’s printers up once, then flip them on for any machine with a switch — and leave the driver hunt behind for good.
Close the doors you’re not using
Shut off the services a machine doesn’t need — one computer or a whole company — and quietly shrink what an attacker could ever touch.
Commands, scripts & schedules
Fire a one-off fix, keep your go-to commands a click away, or run a job on a schedule — one machine or a thousand.
Patching that runs itselfJust shipped
Decide once how each kind of update is handled — critical fixes flow straight through, anything risky waits for your nod, and the one update that always breaks things never installs. Machines patch themselves overnight on your schedule, by company or by type of machine, and quietly flag the ones still waiting on a restart.
Sign in with a scan
No password for the machine in front of you? A code appears right on its lock screen — scan it with your phone, approve, and the computer signs itself in. Nothing typed, nothing shared, and the way in disappears when you sign out.
Just over the horizon.
We’re not standing still. Here’s where baanjai goes next.
Coming to macOS & Linux
baanjai runs on Windows today. The same one-click elevation — request, approve, audit — is on its way to macOS and Linux, so it works everywhere your team does.
In your pocket
Approve access and catch alerts from your phone, wherever the day takes you.
Smart alert routing
Send the right alert to the right person, on the channel they actually watch.
Full enforcement mode
Make approved access the only way to get admin — nothing slips past.
Field guides for tighter IT.
Practical, vendor-neutral playbooks you can act on today — exactly how to do it, step by step. Free, no signup.
The Local-Admin Offboarding Playbook
Remove standing local admin across your fleet in 30 days — without a helpdesk revolt.
Read the guideThe MSP Margin-Leak Playbook
Find the hours admin requests steal from every client contract — and plug the leak.
Read the guideThe Cyber-Insurance Answer Sheet
The privilege & endpoint questions insurers actually ask — and how to answer “yes.”
Read the guideThe Endpoint Hardening Checklist
The eight endpoint controls that stop the ransomware chain — in priority order.
Read the guideSecurity that’s on from the first click.
Granting admin is a security decision — so baanjai treats it like one, for the people asking and the people approving.
- No one holds standing admin — not even your technicians.
- Passwordless passkeys plus authenticator 2FA, enforceable for everyone.
- A complete, searchable record of every request, decision, and elevation.
- Revoke any trust instantly — the next prompt asks again.
- Approvals are single-use and tied to the real person who asked.
- Decide who can approve what — by team and role, down to each machine.
Give your team admin access
the instant they need it.
And not a second longer. Approved, audited, and gone when it’s done.