Gpo to allow local standard users to install software on windows

group-policyuser-accountsuser-profileswindows 10

I have one admin account and 2 standard user accounts on a local computer and not on a domain. For example,

User A -> (Admin Account)

User B -> (Standard Account)

User General -> (Standard Account)

Is there a user group policy setting that I can enforce logging in from the Admin account (User A) such that, only User B can install new software on it? If not is there a mechanism to achieve this. I don't want to put any of these accounts on a domain.

Best Answer

Users can install any software that doesn't require admin privileges. This depends on the software installation, whether it allows you to choose between installing per-user or for all users. The first option shouldn't require admin rights.

Standard users can install any of these programs, for example Zoom and Teams. I think that Chrome would be in this list as well.

A well-built software installation would only ask for elevation once the user has selected the installation option "for all users". But there is no solution or GPO policy that can help with a software installation that asks first for elevation.

Related Question