Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm working on deploying a .NET desktop application via ClickOnce and need the users to be able to run the prerequisite installers. Normal users generally do not have permission to run installers, but is it possible for those users to be granted permission to run installers signed by a company-issued certificate?

share|improve this question

You can control this by group policies, but it depends on the version of the OS. Windows 7 has a nice feature called Applocker that allows you to create Windows Installer Rules & say things like allow this installer to run from this publisher. There are some group policies in XP for allowing regular users to get elevated install privileges, but I think that’s only for things deployed via windows installer (i.e. MSI's).

Depending on what your trying to achieve, it may be easier to assign/publish the application completely via group policy.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.