question

AmandaRuhe-9046 avatar image
0 Votes"
AmandaRuhe-9046 asked AurelioOsorio-7103 answered

Allow Azure users to download and install software without admin

I have students with azure connected laptops working remotely. I would like them to be able to download and install Minecraft EDU while at home. Their computer requires an admin password to complete the install. Is there a way to bypass this? If not, is there an admin profile that I can set up that only allows download installs and not other controls? I could send the students the username and a password (to change after 24 hours) for that account to allow for this install.

Note: This impacts ~40 students, we are on A1 Education Licenses, have no intune or MDM, and no dedicate IT staff....simple is the best solution!

azure-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

amanpreetsingh-msft avatar image
0 Votes"
amanpreetsingh-msft answered

@AmandaRuhe-9046 A standard user don't have the privilege to install a software. The user who is trying to install a software should at least be either a member of PowerUsers group on that computer or he needs to supply Admin's credentials to complete the installation.

To add a user to a local group, you can use lusrmgr.msc and add users to the power users local group or you can create a batch script for this purpose using net localgroup command. I have included the steps below:

  1. Type net user and press Enter to view a list of user accounts on your computer.

  2. Type net localgroup groupname username /add, where username is the name of the existing user you want to add and groupname is the name of the group you want to add them to. For example, if the group name is Accounting and the username is Bill, you would type net localgroup Accounting Bill /add. Then press Enter.

  3. Type net localgroup groupname, where groupname is the name of the group you added the user to, and press Enter to confirm the user has been added to the group.

Note: Please replace groupname with "Power Users" and username with %username% to add currently logged in user to "Power Users" group. This would help if you attach the script with a scheduled task that triggers at login.


Please "Accept as answer" wherever the information provided helps you to help others in the community.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

TLIP3Admin-2552 avatar image
0 Votes"
TLIP3Admin-2552 answered

@amanpreetsingh-msft If I want assign an account have admin permission install software on client computer, which role I should assign on Azure?
Thanks,

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AurelioOsorio-7103 avatar image
0 Votes"
AurelioOsorio-7103 answered

@AmandaRuhe-9046
do you have a solution now?

i have the same problem.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.