Installing MSI with non admin user

[Vitojm]

I'm new to Admin Studio. One of the main issuies we have deploying applications is lack of user privileges. Our machines are locked down which prevents users from installing applications if they are not administrators. When a package or repackage an application how do I make it so a non-admin user can install it? :confused:

[Christopher_Pai]

Generally there are 4 methods:

1) A Per-User pure package: The application and all of its resources are installed to areas the user has ownership of. HKEY_CURRENT_USER, The Users Profile, the users start menu ectera. Since you are repackaging someone elses application, this is unlikely.

2) Install with elevated privs: Since MSI runs as a service it supports running packages with elevated privledges. Many organizations see this as a big security hole so they disable it via policy.

3) Active Directory GPO: Use AD to push MSI's to collections. This assumes you have AD in your network and has limitations when it comes to scability and running programs other then MSI's.

4) Third party distribution tool like SMS, Tivoli ectera: This is the premium solution in my mind. You have a system in place with vast flexibility in terms of client discovery, organizing clients, packages for distribution and scheduling installation of the packages.

[Pugster]

Just as an extra, don't forget if you Advertise an app using an Admin account then the app will install with the elevated privileges of the admin user when the normal user initiates the install.
Not a lot of use though I admit if you've got no mechanism in place in the first place to advertise the app :rolleyes: