Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to give users the permissions in a Windows Server 2008 R2 domain to install Adobe Reader and Flash Updates on their Windows 7 machines? Or are they just stuck with calling on the administrator to install them all the time?

share|improve this question
up vote 12 down vote accepted

Yes, if you use System Center Updates Publisher (SCUP) to publish the updates via WSUS/SCCM.

Then Configure Automatic Updates to Allow Non-administrators to Receive Update Notifications using Group Policy. Limited users will see the updates as below. If you use Automatic Updates scheduling, these updates will install as normal, without user interaction.

enter image description here

Without SCUP/WSUS, you could publish the update to install on start up, with Group Policy, which would use the system's credentials to perform the install.

share|improve this answer
  1. If you do not have access to SCCM to use @jscott's method, but you have a WSUS server, you can use WSUS API to publish the software. There are open-source tools available that make publishing quite easy:
  2. If you do not have a WSUS server you can obtain MSI installers from Adobe and deploy the software by using Group Policy. If you deploy it via Computer Configuration, the installation will proceed in computer's security context and users will not have to have any special permissions.
share|improve this answer
+1, Very good answer and it clarifies what I neglected to mention. I feel this answer deserves more up votes. – jscott Apr 28 '14 at 18:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.