Always install with elevated privileges

Supported OS tags: Windows10, Windows10RT, Windows11, Windows2000, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2003, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista, WindowsXP

This policy setting directs Windows Installer to use elevated permissions when it installs any program on the system. If you enable this policy setting, privileges are extended to all programs. These privileges are usually reserved for programs that have been assigned to the user (offered on the desktop), assigned to the computer (installed automatically), or made available in Add or Remove Programs in Control Panel. This profile setting lets users install programs that require access to directories that the user might not have permission to view or change, including directories on highly restricted computers. If you disable or do not configure this policy setting, the system applies the current user's permissions when it installs programs that a system administrator does not distribute or offer. Note: This policy setting appears both in the Computer Configuration and User Configuration folders. To make this policy setting effective, you must enable it in both folders. Caution: Skilled users can take advantage of the permissions this policy setting grants to change their privileges and gain permanent access to restricted files and folders. Note that the User Configuration version of this policy setting is not guaranteed to be secure.

This policy has no additional user input fields.

• Computer
  Allow user control over installs

  At least Windows 2000
• Computer
  Allow users to browse for source while elevated

  At least Windows 2000
• Computer
  Allow users to patch elevated products

  At least Windows 2000
• Computer
  Allow users to use media source while elevated

  At least Windows 2000
• User
  Always install with elevated privileges

  At least Windows 2000
• Computer
  Control maximum size of baseline file cache

  Windows Installer v3.0
• Computer
  Enforce upgrade component rules

  Windows Installer v3.0
• Computer
  Prevent embedded UI

  Windows Installer v4.5
• Computer
  Prevent Internet Explorer security prompt for Windows Installer scripts

  At least Windows 2000
• User
  Prevent removable media source for any installation

  At least Windows 2000
• Computer
  Prevent users from using Windows Installer to install updates and upgrades

  At least Windows 2000
• Computer
  Prohibit flyweight patching

  Windows Installer v3.0