Can a non-admin user run an msi?

Question

Can a non-admin user run an msi?

Answer

If you only install to locations where non-admins users have privileges, then the answer is easy: yes.

If you install to locations such as program files or HKLM, then the answer is -- they can with MSI if the package has been blessed by an admin to run elevated. Otherwise attempts by the non-admin to write to program files are going to fail. And additionally, a package can't self-elevate -- that would be a security issue.

For the latter case, consult the documentation on MSDN: Installing a Package with Elevated Privileges for a Non-Admin. This is basically what Group Policy and SMS are for.

Content credit also belongs to

[Author: Robert Flaming]

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at https://www.microsoft.com/info/cpyright.htm.