I am trying to use sccm to run a piece of software as the user and not the administrative account. (This is a program requirement -- running as the user that requires the program)

The issue I have run into is I am unable to run the software, because the users do not have local administrator access on their machines.

To workaround this I am trying to create a package to grant them local admin access, do the install, then remove the user from the local admin group with another push.

Is this possible with sccm if, so how do I do it?

I did see a post in scripting, but there was no posted solution.

0 Comments   [ - ] Hide Comments


Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
Answer this question or Comment on this question for clarity


Rather than granting administrative access, I think you may be thinking of having installs run with elevated privileges. You can do that via Group Policy or, as with most GP stuff, temporarily by setting the relevant registry settings on, then off again when the install completes: ' Set Install Elevated to allow installation.
"HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer","AlwaysInstallElevated", "REG_DWORD", 1)
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer","AlwaysInstallElevated", "REG_DWORD", 1)
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer","EnableUserControl", "REG_DWORD", 1)
Set the REG_DWORD to 0 to turn the policy off.
Answered 05/20/2009 by: VBScab
Red Belt

Please log in to comment