Authorizing User Installations
I manage an A/D domain here at work, and I think for the most part I've got everything pretty well set. One thing that bugs me though is that I can't figure out why some users need to enter a domain administrator username & password in order to install software, while others merely need to acknowledge the installation by clicking Ok. UAC is set to the same level for all users, and all users have the same rights and are in the same groups. What difference am I missing?
As a bit of a follow up, it seems they cannot just type any old domain administrator's name and password, but it has to be THE Administrator account. I tried creating another account just for installing software and Windows doesn't allow it. What am I missing there?