I am working with a Windows 10 network with all users/computers connected to AD. I want to remove admin rights of the local Windows users accounts and put everyone on limited access rights BUT, I don't want to hinder the users' ability to run product updates for any applications as they are pushed out. I only want to limit the installation of new software without going through the admin.
Updates are not limited to Windows Updates. I want to make sure the user can get browser (Firefox, Chrome) updates, Adobe updates, etc. I just don't want to allow the user to install new apps that are not approved such as Spotify or Steam as examples.
What is the easiest and best way to do this?
4 Reset to default
