diff --git a/cmake/templates/NSIS.template.in b/cmake/templates/NSIS.template.in
index 1ca9faf57f..a0d7ac09c4 100644
--- a/cmake/templates/NSIS.template.in
+++ b/cmake/templates/NSIS.template.in
@@ -31,17 +31,20 @@
 ;--------------------------------
 ;General
 
-  ; Require administrator access
-  RequestExecutionLevel admin
-
   !ifdef INNER
     !echo "Inner invocation"                  ; just to see what's going on
+
+    ; Require user only for temp installer
+    RequestExecutionLevel user
+
     OutFile "$%TEMP%\tempinstaller.exe"       ; not really important where this is
     SetCompress off                           ; for speed
-
   !else
     !echo "Outer invocation"
 
+    ; Require administrator access
+    RequestExecutionLevel admin
+
     ; Call makensis again, defining INNER.  This writes an installer for us which, when
     ; it is invoked, will just write the uninstaller to some location, and then exit.
     ; Be sure to substitute the name of this script here.