When a non-administrative user tries to install a program from local media, they are prompted to submit alternate credentials. When they try to install a program from a network share, they are not prompted for alternate credentials.
You can control this behavior with two group policies.
When enabled, the Do not request alternate credentials Group Policy, at User Configuration\Administrative Templates\Windows Components\Windows Explorer, prevents users from submitting alternate credentials when installing from local media.
When enabled, the Request credentials for network installations Group Policy, also at User Configuration\Administrative Templates\Windows Components\Windows Explorer, prompts users for alternate credentials when installing from a network share.
NOTE: If Do not request alternate credentials is enabled, Request credentials for network installations is ignored.
NOTE: Many programs will fail to properly install without administrator credentials.
If NOT Configured, both policies have REG_DWORD value names at:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer:
If you set the NoRunasInstallPrompt data value to 1, the Do not request alternate credentials Group Policy is enabled.
If you set the PromptRunasInstallNetPath data value to 1, the Request credentials for network installations Group Policy is enabled.
