Log into Windows as the AutoElevate "over the shoulder" account, without needing to know or store it's password. This includes automatic password rotation & auto-demotion of this user back to "Standard" after you have logged out. Authentication is done as a second-factor via the AE Notify mobile app, by scanning a QR code that is generated on the Windows machine.

Documentation: