Allow domain users to install softwares

Ed7 96 Reputation points
2021-11-03T12:28:55.373+00:00

Hello,

I have multiple engineers whoo need from time to time unistall and install engineers software's and I do now want to give them local administrator access for security reasons.
Is there any way that we can allow them to install software without being administrator (local or domain administrator)?

This is also to prevent them to make any changes within the device.

Thank you

Microsoft System Center
Microsoft System Center
A suite of Microsoft systems management products that offer solutions for managing datacenter resources, private clouds, and client devices.
1,074 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
3,003 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,903 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Charles Thivierge 4,141 Reputation points
    2021-11-03T13:19:31.31+00:00

    Well, there is multiple way to do this.

    1. Trust your users to not install anything weird on their computer
    2. Create a local administrator account and explain to the users to use this user account to install applications when needed
    3. Implement LAPS https://www.microsoft.com/en-ca/download/details.aspx?id=46899

    All of the above solution will not prevent a user to make configuration change because as soon as the user as "Admin rights", he can do anything. But don't forget the number 1... trust your user. If you don't trust your user, do not give them any Admin rights and use any other distribution software.

    hth

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.