We have migrated a number of ordinary domain users from Windows XP to Windows 7 workstations. UAC is turned off.
Is there a way to allow these users to update their own applications (Adobe Flash & Reader, Java, etc.) on their workstations without being part of the local Administrator group? Some setting in Local Security Policy (secpol.msc) perhaps? In testing, adding one of these users to the local Power Users group did not help.