Allow domain users to install softwares

Ed7 91 Reputation points
2021-11-03T12:28:55.373+00:00

Hello,

I have multiple engineers whoo need from time to time unistall and install engineers software's and I do now want to give them local administrator access for security reasons.
Is there any way that we can allow them to install software without being administrator (local or domain administrator)?

This is also to prevent them to make any changes within the device.

Thank you

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,139 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,304 questions
Microsoft System Center
Microsoft System Center
A suite of Microsoft systems management products that offer solutions for managing datacenter resources, private clouds, and client devices.
261 questions
No comments
{count} votes

1 answer

Sort by: Most helpful
  1. cthivierge 3,876 Reputation points
    2021-11-03T13:19:31.31+00:00

    Well, there is multiple way to do this.

    1. Trust your users to not install anything weird on their computer
    2. Create a local administrator account and explain to the users to use this user account to install applications when needed
    3. Implement LAPS https://www.microsoft.com/en-ca/download/details.aspx?id=46899

    All of the above solution will not prevent a user to make configuration change because as soon as the user as "Admin rights", he can do anything. But don't forget the number 1... trust your user. If you don't trust your user, do not give them any Admin rights and use any other distribution software.

    hth

    No comments