Forum Discussion

ChristineVacher's avatar
ChristineVacher
Copper Contributor
Jun 28, 2023

Allow non-admins to install apps from Company Portal

How to allow users without local administrator permissions to install Microsoft Remote Help ?


The Microsoft Remote Help application is featured on Company Portal (app & Web).

Users can click "Install", but then they get a UAC credential prompt, asking them for an admin username & password.

 

This is not what is expected from InTune:

Another important layer is security. Normally, installing apps would require installation rights, for example, local administrator permissions on your Windows 10 Enterprise endpoint. Delivering your app via Microsoft Endpoint Manager allows you to assign and install apps – in a modular fashion – without the need to make the user a local administrator.
[https://subscription.packtpub.com/book/cloud-and-networking/9781801078993/11/ch11lvl1sec81/application-delivery-via-microsoft-endpoint-manager]

2 Replies

  • ChristineVacher's avatar
    ChristineVacher
    Copper Contributor

    Thank you for this response; it may help others who have encountered the problem.

    I can't try the avenues you suggested right away, since I was fired after years of harassment. I'll return to these issues when the judge reinstates me.

  • FatherDivine's avatar
    FatherDivine
    Copper Contributor

    Have you tried your own pre-made intune apps? I've created over 50 and installed software with Intune on over 1,000 computers across thousands of more users of all levels of access, and we never had an issue with a single UAC prompt. Perhaps the "Microsoft Remote Help" is meant for admins, or if someone made that app for you they didn't set it up correctly, correctly like using PSADT (PowerShell App Deploy Toolkit) which handles noninteractive, silent, system and limited users with grace, and/or the correct backend settings for Intune (you can choose to run them as SYSTEM or user context, and it sounds like the app is maybe running in user instead of SYSTEM in your case as SYSTEM is above administrator).

     

    Posting as it may help someone who stumbles across this as I did.

Resources