Windows 10: Intune Windows devices: Admin Credentials Prompt for standard users

Prior to implementing Intune on all Windows devices, we set up local admin accounts on each device and added a separate standard user account for the employee using the device. This ensured that users could not install software, and had to reach out to our IT team so they could approve/deny the install. If approved, the IT team would remote into the device and enter the admin credentials.Now that we have implemented Intune, standard users are NOT being prompted for all installs and are able to install software without needing permission. We have tested UAC configuration policies to try and ens

:)

 

Intune Enrollment Standard Users

I am trying to enroll about a 100 systems in Intune. I want the user to be signed in as a standard user. I am told the only way to do this will be using AutoPilot. Thats is just not possible for us to do in a running company. It requires a factory reset device and a hardware hash. The other way they say is to run a Powershell script. That option doesn't work because we want only the one microsoft account on the system. Windows needs at least one Admin account. I simply want the normal user to be a standard account and in case he needs admin privileges I can connect and type in cloud device administrator's credentials to give him access. However, I cannot find anyway to get this done, kind of hard to believe this is so difficult to do. Any suggestions?

 

How to allow certain applications to be installed by standard users on Windows 10 without admin credentials?

I am trying to accomplish following:

• Have standard users on Windows 10 Pro machines.
• Don't want users to be administrator.
• When user install known applications like adobe acrobat and etc i don't want standard users to get admin credentials required dialog box or Windows security login prompt?

How would i accomplish this?

 

How to install software for a standard user while using admin credentials on UAC prompt?

So often times I come across an issue where when I install software on a standard user account using admin credentials on UAC prompt it will not show up for a standard user. But when I log in as admin it shows up on admin account,
however, this is not desired.

Excerpt from

https://help.plangrid.com/hc/en-us/...r-Account-Control-Administrator-Installations

"UAC manages what happens when you run a process as administrator. If the user is logged in to a ‘standard’ account, UAC will display a prompt that allows them to switch to an administrator account. When this happens, the installer is no longer executing
as the logged-in user it is running as the administrator. This means that all the user file paths & etc are pointing to the administrator account and not the logged-in user. The installed files will be placed in the administrator’s account and won’t be accessible
to the logged-in user."

This behavior of Windows does not work well for us. All users have standard Windows account,
no permission to install software. How can I install software using admin credentials on UAC prompt and software be still available on standard user account?