We have a running PoC with Microsoft EPM so that people no longer need permanent admin rights. It turned out, that the Mendix Studio Pro installer for Windows has been built in a way, that multiple approvals for "Microsoft EPM" are necessary by default. Maybe somebody would like to take a look and think whether an optimization is possible / make sense