Forum Discussion
Blocking Installation of Software via Intune
How are the users to install themselves? Do they have admin rights?
Standard users are not allowed to have the admin access rights to control what or the applications to run on their computers, only the admins are entitled to do that unless PIM is deployed for certain users.
Also adhering to the practice of least privilege and zero trust across the organization for security purpose.
That's not really true and that's the problem. Chrome Browser and other applications can install "User-based" and in doing so bypass the administrator requirements. I get that this calls into question the symantics of what "installed" is as it's not installed to the system. But It registers to add/remove programs if I remember correctly so I consider that "installed".
