Hello,
Thank you for posting in the Microsoft community. Since this forum does not have a dedicated engineer working on the “Microsoft Intune” topic, it is recommended that you ask again in the Microsoft Intune - Microsoft Q&A forum for help.
For your needs, according to my query information, in the domain user does not obtain the administrator password at the same time to perform some operations that require administrator rights (such as installing applications), using Microsoft Intune tool is viable. You can use it to deploy software and updates without the user having to provide administrator rights.
The following articles are for your reference:
Windows app deployment by using Microsoft Intune | Microsoft Learn
Learn about using Windows Update for Business in Microsoft Intune | Microsoft Learn
Thank you for your understanding and cooperation.
Best regards