SOLVED Allow users to install applications

[zedraz]

Hi All
This is a simply question but want to know what is the best method.
Currently end users in the organisation cannot install software or updates on their machines. Currently prompts to ender local admin credentials.
CTO has asked us to change the default policy or AD to allow users to install software (I know not the best but he wants it to happen).
So the standard default user should be able to install applications and updates on their local pc. Nothing more.
Should this be done via editing the default Group policy or Active Directory (assign poweruser rights?) and if so what needs to be done?
Many Thanks

 

[Prajwal Desai]

There are some ways to do this via GPO, but you shouldn't do them as most of these methods provide local admin rights to users.

Why not invest in a tool that can handle application packaging, deployment and software update deployment which would make your life easier. I understand that not all organizations can afford for expensive tool, but there are some tools that are comparatively cheaper and efficient for doing these tasks.

 

[jason.turpen]

I agree with Prajwal on this. Investing in a tool will save you and your end users headaches. It's worth asking for the money.

 

[MJ-Tech]

Check to see whether you have the option to install the application as a user installation,

For example, While installing an MSI application, you may see a screen,
Group policy installation command line, msiexec /i <MSI code> ALLUSERS=2 /qn



For exe, check with the vendor or search the command line in the vendor technical forum.

Some applications can only be installed as per device installation. i.e., All users.
Using group policy in this scenario is little challenge.