question

AmandaRuhe-9046 avatar image
0 Votes"
AmandaRuhe-9046 asked ·

Allow Azure users to download and install software without admin

I have students with azure connected laptops working remotely. I would like them to be able to download and install Minecraft EDU while at home. Their computer requires an admin password to complete the install. Is there a way to bypass this? If not, is there an admin profile that I can set up that only allows download installs and not other controls? I could send the students the username and a password (to change after 24 hours) for that account to allow for this install.

Note: This impacts ~40 students, we are on A1 Education Licenses, have no intune or MDM, and no dedicate IT staff....simple is the best solution!

azure-active-directory
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

amanpreetsingh-msft avatar image
0 Votes"
amanpreetsingh-msft answered ·

@AmandaRuhe-9046 A standard user don't have the privilege to install a software. The user who is trying to install a software should at least be either a member of PowerUsers group on that computer or he needs to supply Admin's credentials to complete the installation.

To add a user to a local group, you can use lusrmgr.msc and add users to the power users local group or you can create a batch script for this purpose using net localgroup command. I have included the steps below:

  1. Type net user and press Enter to view a list of user accounts on your computer.

  2. Type net localgroup groupname username /add, where username is the name of the existing user you want to add and groupname is the name of the group you want to add them to. For example, if the group name is Accounting and the username is Bill, you would type net localgroup Accounting Bill /add. Then press Enter.

  3. Type net localgroup groupname, where groupname is the name of the group you added the user to, and press Enter to confirm the user has been added to the group.

Note: Please replace groupname with "Power Users" and username with %username% to add currently logged in user to "Power Users" group. This would help if you attach the script with a scheduled task that triggers at login.


Please "Accept as answer" wherever the information provided helps you to help others in the community.

· Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.