To give a user access to install applications on their own system without granting that permission for the whole domain or network, add the user to the local administrators group. This applies to professional versions of Windows.


Right-click the START menu button and select Computer Management.



If you are not logged on as an administrator, you can choose Powershell as Admin or Command Prompt as Admin to authenticate as an administrator without logging off and on again.





Then run MMC, select the Computer Management snap-in and click Add. Choose Local computer and click Finish then OK.







Once Computer Management is open, go to Local Users and Groups > Groups, then double-click the Administrators group to open the properties. Click Add to add a user to the group.



Enter the username of a user that exists in the selected location (Domain) or enter the domain and username in the format DOMAIN\username.

Click OK on the Select Users dialog box, then click OK on the Group Properties dialog box.