Problem: In a lot of environments we do not want a user to be administrator on his desktop or laptop. The ability for a user to install application himself may lead to security risk and stuffed machines with unneeded applications. When a user takes a laptop home he/she may need to be able to user it's home printer and so does need to be able to install printer drivers and whatever tools that may involve.

Solution:
I would like to have a Request Application button or a Drop Folder function in which a user can drop a downloaded executable of an application the user wants to install. This triggers an application request in ZCM/NSD which an admin/manager then can review. If granted this creates (in short) a ZCM bundle so the user gets an popup on his desktop to continue the installation which then is performed as a Dynamic Administrator. As more user may need to install such a driver pack or application the administrator/manager could grant the installation rights to users/devices like any ZCM Bundle.

Part of the request review process could be:
* has the user a Anti Virus like solution installed and is it up to date.
* what was the source the user got the file/download from (Vendor CD, download)
* does the MD5 sum match the download or original vendor file.

I've seen this in a Profile Management <vendor X> solution, which was a separate module in the past but was added as part on the enterprise bundle later.

by: Sebastiaan V. | over a year ago | Application Mgmt