Can a user be delegated rights to install software without Domain Admin or Local Admin?

I need a user to be able to install software on their Win7/Win10 laptop. They cannot be a member of Domain Admins or Local Admin on the laptop. Is there a way to give them permissions to do so without making them a member of either group? Membership of those 2 groups are completely off the table. I'm not looking to discuss group policy workarounds to solve this - just wondering if this permission is possible otherwise. Thanks!
Jody DavisSystems EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

McKnifeCommented:
To be very clear from the start: let's say, there was such a way. If you could entitle a user to install any software he likes, it would be very easy for users like me to create a specially crafted installer with the only objective to make me admin.

So clearly: no, there is no such way.
What you could do, is to use GPO software deployment which will allow users to install what you offer them to install (published MSI packages) on demand. However, this will not allow users to install anything they like, which seems to be what you have in mind.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Jody DavisSystems EngineerAuthor Commented:
Well said. And i agree - our company is WAY too liberal - but the request was handed to me nonetheless. lol. But good point on the published ms apps through group policy. Thanks man.
0
McKnifeCommented:
You are welcome. Learn about the process of publishing installers for on-demand-installation by non-admins: https://www.advancedinstaller.com/user-guide/tutorial-gpo.html ->See 5.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Software

From novice to tech pro — start learning today.