- Thu, Aug 13 2020 at 5:48 am #1557429StevenParticipantMember Points: 1,114Rank: 3
Goal: give permission installation permission to a given user on his machine.
I aim to give some permissions to a few specific users that I know will not go loosey goosey. It will prevent waiting time for some clients for updates on software like Java.
I have done some reading and I wanted to challenge my idea here as I can miss key points. After a few readings, I saw that you have to add the user to the local administrator group. I am trying to see if that is the only way to give users that kind of permission without opening too many doors.
- Thu, Aug 13 2020 at 5:57 am #1557431Leos MarekModeratorMember Points: 23,212Rank: 4
Minimum permission to install a software is to be an Administrator 🙂
Unless you use any deployment solutions like SCCM where users can pick software from a catalog and install it without Admin rights, you have no other option.
You can create a separate user for them (which is what you should do anyway, normal user should never be admin) and then you can use GPO to limit that user/group rights (for example you can set Deny network logon). But you dont have many options there 🙂
- Thu, Aug 13 2020 at 2:10 pm #1557444Paolo MaffezzoliParticipantMember Points: 66,245Rank: 4
In user management, the best practice is not to give administrative permissions. As already said by Leos, if for some particular reason you need to grant users permissions to install software, then it’s best to create a local admin user, preferably with batch or powershell script. Otherwise the solution is manage software updates with a deployment tool, just check several examples at https://4sysops.com/tag/deployment/
- Thu, Aug 13 2020 at 2:18 pm #1557445Paolo MaffezzoliParticipantMember Points: 66,245Rank: 4
FYI, there was Power User till Windows 7/8 that was like an “admin” user and designed to give users specific administrator rights and permissions to install programs that do not modify operating system files or install system services. But Power User is deprecated in Windows 10 and doesn’t exist a similar solution to delegate installation rights to end users.
- You must be logged in to reply to this topic.