Open the article in separate window

Audience: IT Professionals
Purpose: Allow standard users to install and update Timetabling Solutions V10

Option 1:  Use Endpoint Privilege Management with Microsoft Intune

Option 2:  Create a GPO following the details below

The methods below only apply to clients is using On-prem AD or Hybrid AD, as this method requires a group policy to manage the permissions

Create a GPO with these settings:

  • Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options
  • User Account Control: Run all administrators in Admin Approval ModeEnabled
  • Assign the policy to an individual or a group (consider creating a Dynamic Group in AD to automate the assignment)

User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode Elevate without prompting.

Alternatively, for a non-domain joined machine or one with a local admin account, the client can set up a custom shortcut to the app with the following command to launch the application using a stored admin cred, invoking the local users and group's savecred function.

Replace the target on the shortcut with the following:
runas.exe /user:Local_HostName\Local_admin_Account /savecred "cmd /C """C:
[Application_Path]\TimetablingSolutionsX.exe

For clients on Azure AD, the custom GP might not work as intended, as the Intune policy might not allow UAC management for locally installed apps.

You can manage the same permissions using Intune to deploy the desktop application first.

NOTE:  Timetabling Solutions provides a standard windows installer and support for desktop installations.   For support with Microsoft InTune, please contact Microsoft.