Windows 10: Not allowing to install software from local user even admin privilege that user has in...

Hi All,I am using windows 10 work or school .I have a local user and default admin user. The local user has all the privileges as admin.it installed few software's by local user only. I am trying to uninstall from local user but not able to do that.it shows only NO button and not showing YES button I am trying to switch user but it not showing logon screen and it shows again local user only without password. Please help me. Thanks,

:)

 

UAC allows users to install software without admin rights?

Hi Everyone,

It has come to our attention that our users can in fact install software without an admin account or an admin present. This is done simply by then doing the following:

The user downloads the app / package.

User runs install.

User is presented with UAC.

User puts their own username and password in presses enter and the software carrys on.

Surely, UAC should not allow the user to proceed to install software? This is all enabled via Group Policy and everything is defined as it should be.

Not sure why UAC is failing like this? Any suggestions would be greatly appreciated.

**Just found**

When a user right clicks on a program and selects "Run as Administrator". Uses their own details it runs happily. Almost as if domain users have admin rights?

 

Group Policy to allow specific users to install specific software without admin privileges

I am a newly system administrator for an organization and I am trying to create a Group Policy that will allow specific users to download and use certain software like LogMeIn123 without having to use admin privileges. We don't want to give full admin rights, but only for this specific instance. I have done some research, but I am not sure the best way to set this up. The problem is our IT team consists of 3 members total and cannot be everywhere at once and this would be beneficial in key times.

I have seen some people recommend using a login script, but I am not sure how to do that. I have also seen some people recommend using a third-party tool which is out of the questions for our organization.

I am also open to other ways and ideas of having preforming this.

Can anyone please provide me with some instructions on how to set this up?

Thanks in advance for your help!

Additional information:

• I am using Windows Server 2012R2.
  
• I have a list of the specific users that I want to allow to install LogMeIn123.
  
• I have the LogMeIn123 installation file located on a network server.
  

 

Specific local admin privileges

Greetings,

I was wondering if there was a way to assign specific local admin privileges Intune (or Entra). Here's the situation: Our users are using USB encryption dongles (Yubikey) to log into a particular software requiring MFA. Naturally, users often forget their passwords for the dongle. To be able to reset the password requires local admin access. The regular users don't have that, and our helpdesk people do not have that access either (without going through an approval process). I was just wondering if and how it might be possible to give our helpdesk operators this specific privilege without making them full local admins on the machines.