In my network I have 50 users, mostly using a PC or laptop with Windows 7 Pro. In the past I had some problems with users installing illegal software on their workstations, so now I blocked the ability to install anything.
I didn’t use a GPO to do this. On each computer I add the user to the local Power Users group. Then I leave the User Account Control to standard. When something needs to install on the computer, the user gets prompted for admin credentials.
The problem is that there are serveral standard programs installed on every computer, that need to be updated once in a while. Think about Adobe Acrobat Reader, Flash Player, Java…. Is there a way to update these programs automaticly in the background? Or should I just disable update for each program? For the users it can be pretty annoying sometimes to see the update pop-up all the time.