diff --git a/Overlord-Client/cmd/agent/session.go b/Overlord-Client/cmd/agent/session.go
index 29bd4c7..af2dde0 100644
--- a/Overlord-Client/cmd/agent/session.go
+++ b/Overlord-Client/cmd/agent/session.go
@@ -612,6 +612,7 @@ func runSession(ctx context.Context, cancel context.CancelFunc, conn *websocket.
 	hello.CPU = hw.CPU
 	hello.GPU = hw.GPU
 	hello.RAM = hw.RAM
+	hello.IsAdmin = sysinfo.IsAdmin()
 
 	if err := wire.WriteMsg(ctx, env.Conn, hello); err != nil {
 		return fmt.Errorf("send hello: %w", err)
diff --git a/Overlord-Client/cmd/agent/sysinfo/admin_other.go b/Overlord-Client/cmd/agent/sysinfo/admin_other.go
new file mode 100644
index 0000000..d4e0dae
--- /dev/null
+++ b/Overlord-Client/cmd/agent/sysinfo/admin_other.go
@@ -0,0 +1,10 @@
+//go:build !windows
+
+package sysinfo
+
+import "os"
+
+// root == admin
+func IsAdmin() bool {
+	return os.Getuid() == 0
+}
diff --git a/Overlord-Client/cmd/agent/sysinfo/admin_windows.go b/Overlord-Client/cmd/agent/sysinfo/admin_windows.go
new file mode 100644
index 0000000..5f1c8ab
--- /dev/null
+++ b/Overlord-Client/cmd/agent/sysinfo/admin_windows.go
@@ -0,0 +1,11 @@
+//go:build windows
+
+package sysinfo
+
+import "golang.org/x/sys/windows"
+
+// check current process token to see if we're admin asf
+func IsAdmin() bool {
+	token := windows.GetCurrentProcessToken()
+	return token.IsElevated()
+}
diff --git a/Overlord-Client/cmd/agent/wire/protocol.go b/Overlord-Client/cmd/agent/wire/protocol.go
index a8f129c..2d2cd2c 100644
--- a/Overlord-Client/cmd/agent/wire/protocol.go
+++ b/Overlord-Client/cmd/agent/wire/protocol.go
@@ -19,6 +19,7 @@ type Hello struct {
 	CPU         string        `msgpack:"cpu,omitempty"`
 	GPU         string        `msgpack:"gpu,omitempty"`
 	RAM         string        `msgpack:"ram,omitempty"`
+	IsAdmin     bool          `msgpack:"isAdmin,omitempty"`
 }
 
 type EnrollmentChallenge struct {
diff --git a/Overlord-Server/public/assets/main.css b/Overlord-Server/public/assets/main.css
index 591ad7f..e5c6c9d 100644
--- a/Overlord-Server/public/assets/main.css
+++ b/Overlord-Server/public/assets/main.css
@@ -429,6 +429,11 @@ p {
   color: #94a3b8;
   border-color: rgba(71, 85, 105, 0.55);
 }
+.pill-admin {
+  background: rgba(234, 179, 8, 0.18);
+  color: #fef08a;
+  border-color: rgba(234, 179, 8, 0.45);
+}
 
 /* Hardware info toggle & panel */
 .pill-hw {
diff --git a/Overlord-Server/public/assets/render.js b/Overlord-Server/public/assets/render.js
index fda69a4..cf575af 100644
--- a/Overlord-Server/public/assets/render.js
+++ b/Overlord-Server/public/assets/render.js
@@ -205,6 +205,7 @@ export function createRenderer({
     card.dataset.nickname = String(client.nickname || "");
     card.dataset.customTag = String(client.customTag || "");
     card.dataset.bookmarked = String(!!client.bookmarked);
+    card.dataset.admin = String(!!client.isAdmin);
     card._customTagNote = String(client.customTagNote || "");
     const os = osBadge(client.os || "unknown");
     const arch = archBadge(client.arch || "");
@@ -266,6 +267,7 @@ export function createRenderer({
               <i class="fa-solid fa-circle"></i>
               ${client.online ? "Online" : "Offline"}
             </span>
+            ${client.isAdmin ? `<span class="pill pill-admin"><i class="fa-solid fa-shield-halved"></i> Admin</span>` : ""}
             ${!client.online && client.disconnectReason && client.disconnectReason !== "normal" ? (() => {
               const iconMap = { panic: "fa-skull-crossbones", crash: "fa-skull", timeout: "fa-clock", network: "fa-plug-circle-xmark" };
               const colorMap = { panic: "text-red-400", crash: "text-red-400", timeout: "text-amber-400", network: "text-slate-400" };
diff --git a/Overlord-Server/public/index.html b/Overlord-Server/public/index.html
index 34e6f45..dabf752 100644
--- a/Overlord-Server/public/index.html
+++ b/Overlord-Server/public/index.html
@@ -100,6 +100,7 @@
             <option value="ping_desc">Ping ↓</option>
             <option value="country_asc">Country A→Z</option>
             <option value="country_desc">Country Z→A</option>
+            <option value="admin_first">Admin first</option>
           </select>
           <button
             id="select-all"
diff --git a/Overlord-Server/src/db.ts b/Overlord-Server/src/db.ts
index bcb9a18..7a20c49 100644
--- a/Overlord-Server/src/db.ts
+++ b/Overlord-Server/src/db.ts
@@ -79,6 +79,9 @@ try {
 try {
   db.run(`ALTER TABLE clients ADD COLUMN ram TEXT`);
 } catch {}
+try {
+  db.run(`ALTER TABLE clients ADD COLUMN is_admin INTEGER NOT NULL DEFAULT 0`);
+} catch {}
 db.run(
   `CREATE INDEX IF NOT EXISTS idx_clients_public_key ON clients(public_key);`,
 );
@@ -250,8 +253,8 @@ export function upsertClientRow(
 ) {
   const now = partial.lastSeen ?? Date.now();
   db.run(
-    `INSERT INTO clients (id, hwid, role, ip, host, os, arch, version, user, nickname, custom_tag, custom_tag_note, monitors, country, last_seen, online, ping_ms, enrollment_status, public_key, key_fingerprint, cpu, gpu, ram)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `INSERT INTO clients (id, hwid, role, ip, host, os, arch, version, user, nickname, custom_tag, custom_tag_note, monitors, country, last_seen, online, ping_ms, enrollment_status, public_key, key_fingerprint, cpu, gpu, ram, is_admin)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, COALESCE(?, 0))
      ON CONFLICT(id) DO UPDATE SET
        hwid=COALESCE(excluded.hwid, clients.hwid),
        role=COALESCE(excluded.role, clients.role),
@@ -274,7 +277,8 @@ export function upsertClientRow(
        key_fingerprint=COALESCE(excluded.key_fingerprint, clients.key_fingerprint),
        cpu=COALESCE(excluded.cpu, clients.cpu),
        gpu=COALESCE(excluded.gpu, clients.gpu),
-       ram=COALESCE(excluded.ram, clients.ram)
+       ram=COALESCE(excluded.ram, clients.ram),
+       is_admin=COALESCE(excluded.is_admin, clients.is_admin)
     `,
     partial.id,
     partial.hwid ?? partial.id,
@@ -299,6 +303,7 @@ export function upsertClientRow(
     partial.cpu ?? null,
     partial.gpu ?? null,
     partial.ram ?? null,
+    partial.isAdmin !== undefined ? (partial.isAdmin ? 1 : 0) : null,
   );
 
   if (partial.hwid) {
@@ -539,6 +544,8 @@ export function listClients(filters: ListFilters): ListResult {
         return `ORDER BY ${online}, ${bookmark}, LOWER(COALESCE(country, 'zz')) ASC, id ASC`;
       case "country_desc":
         return `ORDER BY ${online}, ${bookmark}, LOWER(COALESCE(country, 'zz')) DESC, id ASC`;
+      case "admin_first":
+        return `ORDER BY ${online}, ${bookmark}, is_admin DESC, id ASC`;
       default:
         return `ORDER BY ${online}, ${bookmark}, last_seen DESC, id ASC`;
     }
@@ -556,7 +563,7 @@ export function listClients(filters: ListFilters): ListResult {
 
   const rows = db
     .query<any>(
-      `SELECT id, hwid, role, host, os, arch, version, user, nickname, custom_tag as customTag, custom_tag_note as customTagNote, monitors, country, last_seen as lastSeen, online, ping_ms as pingMs, bookmarked, enrollment_status as enrollmentStatus, public_key as publicKey, key_fingerprint as keyFingerprint, cpu, gpu, ram, disconnect_reason as disconnectReason, disconnect_detail as disconnectDetail
+      `SELECT id, hwid, role, host, os, arch, version, user, nickname, custom_tag as customTag, custom_tag_note as customTagNote, monitors, country, last_seen as lastSeen, online, ping_ms as pingMs, bookmarked, enrollment_status as enrollmentStatus, public_key as publicKey, key_fingerprint as keyFingerprint, cpu, gpu, ram, is_admin as isAdmin, disconnect_reason as disconnectReason, disconnect_detail as disconnectDetail
        FROM clients
        ${whereSql}
        ${orderBy}
@@ -588,6 +595,7 @@ export function listClients(filters: ListFilters): ListResult {
     cpu: c.cpu || null,
     gpu: c.gpu || null,
     ram: c.ram || null,
+    isAdmin: c.isAdmin === 1,
     disconnectReason: c.disconnectReason || null,
     disconnectDetail: c.disconnectDetail || null,
     thumbnail: getThumbnail(c.id),
diff --git a/Overlord-Server/src/httpHandlers.ts b/Overlord-Server/src/httpHandlers.ts
index 6394543..fa77a15 100644
--- a/Overlord-Server/src/httpHandlers.ts
+++ b/Overlord-Server/src/httpHandlers.ts
@@ -25,11 +25,14 @@ export function handleClientsRequest(req: Request): Response {
   const result = listClients({ page, pageSize, search, sort, statusFilter, osFilter, enrollmentFilter: "approved" });
   const items = result.items.map((item) => {
     const live = clientManager.getClient(item.id);
-    if (live?.monitorInfo?.length) {
+    if (live) {
       return {
         ...item,
-        monitors: live.monitorInfo.length,
-        monitorInfo: live.monitorInfo,
+        isAdmin: live.isAdmin ?? item.isAdmin,
+        ...(live.monitorInfo?.length ? {
+          monitors: live.monitorInfo.length,
+          monitorInfo: live.monitorInfo,
+        } : {}),
       };
     }
     return item;
diff --git a/Overlord-Server/src/types.ts b/Overlord-Server/src/types.ts
index 79e4cb0..ad9e3cd 100644
--- a/Overlord-Server/src/types.ts
+++ b/Overlord-Server/src/types.ts
@@ -28,6 +28,7 @@ export type ClientInfo = {
   cpu?: string;
   gpu?: string;
   ram?: string;
+  isAdmin?: boolean;
   enrollmentStatus?: EnrollmentStatus;
   publicKey?: string;
   keyFingerprint?: string;
diff --git a/Overlord-Server/src/wsHandlers.ts b/Overlord-Server/src/wsHandlers.ts
index 4faf100..89079a9 100644
--- a/Overlord-Server/src/wsHandlers.ts
+++ b/Overlord-Server/src/wsHandlers.ts
@@ -89,6 +89,7 @@ export function handleHello(
   info.monitors = payload.monitors;
   info.monitorInfo = (payload as any).monitorInfo || info.monitorInfo;
   info.inMemory = !!(payload as any).inMemory;
+  info.isAdmin = !!(payload as any).isAdmin;
   info.cpu = (payload as any).cpu || info.cpu;
   info.gpu = (payload as any).gpu || info.gpu;
   info.ram = (payload as any).ram || info.ram;
@@ -117,6 +118,7 @@ export function handleHello(
     cpu: info.cpu,
     gpu: info.gpu,
     ram: info.ram,
+    isAdmin: info.isAdmin,
     lastSeen: info.lastSeen,
     online: 1,
   });
@@ -135,6 +137,7 @@ export function handlePing(info: ClientInfo, payload: WireMessage, ws: any) {
       id: info.id,
       lastSeen: info.lastSeen,
       online: 1,
+      isAdmin: info.isAdmin,
     });
   }
   ws.send(encodeMessage({ type: "pong", ts: payload.ts || Date.now() }));
@@ -191,6 +194,7 @@ export function handlePong(info: ClientInfo, payload: WireMessage) {
       pingMs: info.pingMs,
       lastSeen: info.lastSeen,
       online: 1,
+      isAdmin: info.isAdmin,
     });
     lastClientDbSync.set(info.id, nowTs);
 
@@ -201,6 +205,7 @@ export function handlePong(info: ClientInfo, payload: WireMessage) {
         id: info.id,
         lastSeen: info.lastSeen,
         online: 1,
+        isAdmin: info.isAdmin,
       });
     }
   }
@@ -251,7 +256,7 @@ export function handleFrame(info: ClientInfo, payload: any) {
     info.lastSeen = now;
     info.online = true;
     if (shouldSyncClientToDb(info.id, now)) {
-      queueClientDbUpdate({ id: info.id, lastSeen: now, online: 1 });
+      queueClientDbUpdate({ id: info.id, lastSeen: now, online: 1, isAdmin: info.isAdmin });
     }
   }
 }