

Given this situation, it is suggested to use a standard user to download and install the Adobe acrobat reader app from Microsoft store in an unenrolled device and check if it still asks for elevated rights. Based on my understanding, it seems that it is designed by Adobe acrobat reader app itself. From your description, did you mean that only Adobe acrobat reader asks for elevated rights and other apps doesn't? If there is anything misunderstanding, please correct me.įrom the information you provided, there is no settings to make the app need elevated rights. Mem-intune-device-configurations Thanks for posting in our Q&A. ) has to be able to install without elevated rights.ĭo i need to do this by powershell, if yes: can i get an example? The apps in the company portal ( from the store, converted exe or msi. My users are allowed to use the app store, download/ install apps from the store (but not from internet or other programs that need elevated rights) I don't want to give the admin rights to my users. I prepped the chrome app, no problem to install.Ĭonfig profile? additional config profile for the store? I pushed the LastPass app and firefox app to the company portal: no problem for the users. Same story when i push the app in the company portal. Only i (global admin) can install the app. but when the app wants to install itself: the elevated rights screen pops up. Whatsapp app could be installed, HP smart app could be installed.īut not all the apps could be installed by a normal (non admin) user.įor example: when they want to install Adobe acrobat reader, they can download it. They can use the store, look for apps, download them.

Only apps from the store: Store is preffered. I configured the device restriction profile to the following: Most of the apps could be downloaded and installed. I have the Company portal app, and most of the apps are working (even the exe files that i prepped with the intuneprep tool). Question about deploying apps to my users in an Intune environment.Īll the devices are Azure AD joined, device config profile is working on the laptops.
