Allow Azure users to download and install software without admin

Amanda Ruhe 1 Reputation point
2020-03-15T14:39:24.683+00:00

I have students with azure connected laptops working remotely. I would like them to be able to download and install Minecraft EDU while at home. Their computer requires an admin password to complete the install. Is there a way to bypass this? If not, is there an admin profile that I can set up that only allows download installs and not other controls? I could send the students the username and a password (to change after 24 hours) for that account to allow for this install.

Note: This impacts ~40 students, we are on A1 Education Licenses, have no intune or MDM, and no dedicate IT staff....simple is the best solution!

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,561 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. AmanpreetSingh-MSFT 56,311 Reputation points
    2020-03-19T07:30:26.927+00:00

    @Amanda Ruhe A standard user don't have the privilege to install a software. The user who is trying to install a software should at least be either a member of PowerUsers group on that computer or he needs to supply Admin's credentials to complete the installation.

    To add a user to a local group, you can use lusrmgr.msc and add users to the power users local group or you can create a batch script for this purpose using net localgroup command. I have included the steps below:

    1. Type net user and press Enter to view a list of user accounts on your computer.
    2. Type net localgroup groupname username /add, where username is the name of the existing user you want to add and groupname is the name of the group you want to add them to. For example, if the group name is Accounting and the username is Bill, you would type net localgroup Accounting Bill /add. Then press Enter.
    3. Type net localgroup groupname, where groupname is the name of the group you added the user to, and press Enter to confirm the user has been added to the group.

    Note: Please replace groupname with "Power Users" and username with %username% to add currently logged in user to "Power Users" group. This would help if you attach the script with a scheduled task that triggers at login.

    -----------------------------------------------------------------------------------------------------------

    Please "Accept as answer" wherever the information provided helps you to help others in the community.

    0 comments No comments

  2. TLIP3 Admin 1 Reputation point
    2021-11-30T09:17:44.817+00:00

    @AmanpreetSingh-MSFT If I want assign an account have admin permission install software on client computer, which role I should assign on Azure?
    Thanks,

    0 comments No comments

  3. Aurelio Osorio 1 Reputation point
    2022-05-14T04:08:50.28+00:00

    @Amanda Ruhe
    do you have a solution now?

    i have the same problem.

    0 comments No comments