Allow domain users to install softwares

Question

Hello,

I have multiple engineers whoo need from time to time unistall and install engineers software's and I do now want to give them local administrator access for security reasons.
Is there any way that we can allow them to install software without being administrator (local or domain administrator)?

This is also to prevent them to make any changes within the device.

Thank you

Answer 1

Well, there is multiple way to do this.

1. Trust your users to not install anything weird on their computer
2. Create a local administrator account and explain to the users to use this user account to install applications when needed
3. Implement LAPS https://www.microsoft.com/en-ca/download/details.aspx?id=46899

All of the above solution will not prevent a user to make configuration change because as soon as the user as "Admin rights", he can do anything. But don't forget the number 1... trust your user. If you don't trust your user, do not give them any Admin rights and use any other distribution software.

hth