I need a user to be able to install software on their Win7/Win10 laptop. They cannot be a member of Domain Admins or Local Admin on the laptop. Is there a way to give them permissions to do so without making them a member of either group? Membership of those 2 groups are completely off the table. I'm not looking to discuss group policy workarounds to solve this - just wondering if this permission is possible otherwise. Thanks!