Allowing clients to install certain applications

[BJG]

I've just moved to a new network and I'm trying to improve their application control. In the past I've used things like PDQ Deploy or SCCM to deploy ad-hoc software to clients (or allow them to install selected things themselves), but they don't have anything like that here; if someone says eg "Can I get 7zip on my laptop" (current ticket) it's a case of remoting in or configuring Group Policy, which seems like an unnecessary hassle. If they try to install it themselves they see a UAC warning box, "Do you want to allow this app to make changes, enter an admin username/password" etc.

 

What's the simplest free improvement here, eg to whitelist certain programs for users, or deploy software more easily...?

 

Thanks!

Edited October 29, 2021 by BJG

[thimon]

I’m pretty sure you can get a free version of PDQ Deploy, if you want to use it at your new place.

[mavhc]

If you're starting from scratch probably best to use winget

[chazzy2501]

if the program has an msi you can use published installs via GPO which is nice. Staff go to Control Panel > Get Programs and click on the one they want.

 

edit: this is how I have staff install 4matrix and notepad ++ also some less used programs like serif page plus.

 

I also allow staff access to the Microsoft Store.

Edited October 29, 2021 by chazzy2501

[Boredguy]

All good ideas, but keep in mind any applications you might have that are not freeware/site licenced might be best to kept hidden from users to install themselves.