JSI Tip 3290. Can I control the use of alternate credentials for program installs?

When a non-administrative user tries to install a program from local media, they are prompted tosubmit alternate credentials. When they try to install a program from a network share, they are not prompted for alternate credentials.

You can control this behavior with two group policies.

When enabled, the Do not request alternate credentials Group Policy, at User ConfigurationAdministrative TemplatesWindows ComponentsWindows Explorer, prevents users from submitting alternate credentials when installing from local media.

When enabled, the Request credentials for network installations Group Policy, also at User ConfigurationAdministrative TemplatesWindows ComponentsWindows Explorer, prompts users for alternate credentials when installing from a network share.

NOTE: If Do not request alternate credentials is enabled, Request credentials for network installations is ignored.

NOTE: Many programs will fail to properly install without administrator credentials.

If NOT Configured, both policies have REG_DWORD value names at:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer:

If you set the NoRunasInstallPrompt data value to 1, the Do not request alternate credentials Group Policy is enabled.

If you set the PromptRunasInstallNetPath data value to 1, the Request credentials for network installations Group Policy is enabled.