How are you handling windows updates? I run a medium sized Win2003 Server based network with mostly Windows XP PRo PC's and a fwe Win 2000 Pc's. I've enabled automatic updates on the PC's (download automatically and install once a week) but the power users can't install the updates. They seem to download ok, but the install option isn't available unless I log on with admin rights.
Would SUS or a group policy solve this problem? I have too many pc's to go around and manually install updates once a week and I don't want the users to have local admin rights.