Installing pathces

[joe]

I am trying to use active directory to install patches. I
have attached a batch file to a group policy to install a
patch when the specific user logs on. When the user logs
on it tries to install but says I do not have permission
to update windows. I have been successful if I add the
user to the domain admin groups, but do not want to do
this. Is there any other user that can install patches.

Please help

 

[Marina Roos]

You should add the users to the local Administratorsgroup on their
workstation, not add them to your domain admins.

Marina