Is it possible to give users the permissions in a Windows Server 2008 R2 domain to install Adobe Reader and Flash Updates on their Windows 7 machines? Or are they just stuck with calling on the administrator to install them all the time?
Yes, if you use System Center Updates Publisher (SCUP) to publish the updates via WSUS/SCCM.
Then Configure Automatic Updates to Allow Non-administrators to Receive Update Notifications using Group Policy. Limited users will see the updates as below. If you use Automatic Updates scheduling, these updates will install as normal, without user interaction.
Without SCUP/WSUS, you could publish the update to install on start up, with Group Policy, which would use the system's credentials to perform the install.
- If you do not have access to SCCM to use @jscott's method, but you have a WSUS server, you can use WSUS API to publish the software. There are open-source tools available that make publishing quite easy:
- If you do not have a WSUS server you can obtain MSI installers from Adobe and deploy the software by using Group Policy. If you deploy it via Computer Configuration, the installation will proceed in computer's security context and users will not have to have any special permissions.