I'm working on deploying a .NET desktop application via ClickOnce and need the users to be able to run the prerequisite installers. Normal users generally do not have permission to run installers, but is it possible for those users to be granted permission to run installers signed by a company-issued certificate?
You can control this by group policies, but it depends on the version of the OS. Windows 7 has a nice feature called Applocker that allows you to create Windows Installer Rules & say things like allow this installer to run from this publisher. There are some group policies in XP for allowing regular users to get elevated install privileges, but I think that’s only for things deployed via windows installer (i.e. MSI's).
Depending on what your trying to achieve, it may be easier to assign/publish the application completely via group policy.