We are upgrading our clients from Windows 7 Pro to Enterprise and was wondering if Applocker can be configured to allow Domain Users to install approved software? We currently have SCCM 2007 in our environment and a good example would be if a user installs iTunes via the SCCM 2007 "Get Programs" feature, but then is later prompted to install updates a month later, but since they are not administrators their credentials will of course not allow the upgrade. Could Applocker get around this and either elevate a user to admin or somehow allow particular software titles to be upgraded without me repackaging them within SCCM?

No, to be able to install applications or application updates on a machine you need to have administrative rights (in most cases), AppLocker will not help you solve your problem. What you need to do before distributing the software is to turn off application updating in the MSI, via transform etc. That way you can relax and package each new application update in calm and then distribute when ready.Blogging about Windows for IT pros at www.theexperienceblog.com

No, to be able to install applications or application updates on a machine you need to have administrative rights (in most cases), AppLocker will not help you solve your problem. What you need to do before distributing the software is to turn off application updating in the MSI, via transform etc. That way you can relax and package each new application update in calm and then distribute when ready.Blogging about Windows for IT pros at www.theexperienceblog.com

Hi, Also, you may refer to the similar post below. http://social.technet.microsoft.com/Forums/et-EE/w7itproinstall/thread/aa01ef40-c788-4d04-9260-36400ee5c337Juke Chou TechNet Community Support

Hi, Also, you may refer to the similar post below. http://social.technet.microsoft.com/Forums/et-EE/w7itproinstall/thread/aa01ef40-c788-4d04-9260-36400ee5c337Juke Chou TechNet Community Support