I have my zen apps setup as run applications and as install applications.
I have workstation groups setup to assosciate the applications with.
When a group needs a new application, I associate the run application with the group that adds an icon to the desktop of each workstation in the group.

The goal is to allow the user to double click the run icon, if necessary perform the install/update, and launch the application.

This all works fine if the logged in user has rights to the install path, but if not then the applications fail to install.

I don't want to give all users access to the install paths, so I am trying to figure out a way around this.

My understanding is that with the user logged in, the application should run in the user space so is there a way to give the user temporary rights to the installs or just give the rights to the run applications somehow?

Any suggestions?