Like the Title says nobody can install winodws updates. Thats not entirely true. I can if I log in with my user id but I’m domain admin but thats the only user id that can. I think this is a group policy issue but I’m not sure because I have not found it yet. I dont even use group policy that much in our domain. I have checked the default policies and see nothing that would do this. If I wanted to could I delete/remove all policies in effect and start fresh with new ones and see if that fixes the problems. If thats an option whats the best way of doing this?