Allowing Users to Install Fonts without an Admin Password

Powershell Script for Microsoft Windows

Microsoft Windows requires an admin password to install a font. I’ve hacked together a simple Powershell script to allow any user (regardless of admin permissions) to install a font on their local PC.

This is perfect for creative industries where users need to constantly install new fonts for design or video work. This means you can keep following the concept of least-privilege on your workstations while still empowering users to perform this benign everyday task.

Unfortunately, Microsoft hasn’t given us a local Security Policy to enable this privilege. Hence, the need for this script which can be run as the local computer context and install regardless of any individual user’s permissions.

The following script, based on a script originally posted at EduGeek.net, takes all fonts from a specified folder and installs them upon computer startup. All you need to do is run this script as a Group Policy Computer Startup Script, and new fonts will be installed every time a user reboots their PC.

Here’s the full Powershell script:

Get the Broadcast Technology Newsletter

Sign up for the email newsletter about media and technology. Sent irregularly. No spam.

I'm Anthony Eden, and I'm a broadcast technician / software developer / technology solutions engineer. I've been working in broadcast media since 2008 (getting my start in Community Radio while still at school), and developing software and websites for just as long. Right now, I work in the broadcast industry and provide some freelance services through Media Realm.

Follow Anthony on Twitter: @anthony_eden