My question is, how do I configure Windows 7 Pro domain user accounts so that they can install software? I know some may think this is a bad idea and I agree, but it's not my decision. Googling has not produced a answer. We don't have Applocker. I have tried disabling the UAC setting for "Detect Application Installation and Prompt For Elevation" under Control Panel/Administrative Tools/Security Settings/Local Policies/Security Options. Also tried setting "Prohibit User Installs" to "Allow User Installs" under Local Computer Policy/Administrative Templates/Windows Components/Windows Installer.

You can use group policies to install MSI packs. To permit your users to install their own softwares, you should make them local administrators on their computers. To perform that via group policies, please use Restricted Groups. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

Thanks for quick reply. I now realize that I left out some criteria. I would like them to be users accounts (instead of local admins) that can install any software not just msi's. When we ran XP we had our user's set up as local administrators, but I was hoping to avoid that with Windows 7 if possible. Thanks In Advance,

No, they should be members of local admin group to be able to install softwares. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration