I have a situation for a user which is not in a corporate LAN. The user is a small business with a home computer. To prevent other members of the user's family from installing malware, games, or other unwanted software if they use the computer, the user's regular account is not a local administrator. When the user needs an upgrade, he has someone come and do remote support. The support person has the admin account password, and enters it for the user when UAC prompts for it.
The user has a program which takes content updates every now and then. For this program, it would be great if the user could install on his own from the publisher. All of the official software updates can be downloaded from a website and then installed from an an exe (may be MSI, need to check).
The ideal situation would be that the user can download these updates and install without needing the admin password for anything from this publisher. This balances the risk of letting the user install stuff on his own without needing the effort of a remote tech each time.
Since the user is not on a corporate lan, packing and remote install option are not a good fit because they would take just as much time as remotting in and typing the password.
Is there anyway to whitelist the publisher so that UAC does not prompt for this publisher, but for anything else the admin password would still be needed?