SBS 2011 Allow User to Control Update

Hello,

I have a small SBS 2011 domain with 11 clients.  One client PC is a laptop used for sales work.  The user needs to be able to shut down his laptop quickly as he moves between sales calls, and very frequently he will shut down and updates will start installing, sometimes taking 30-45 minutes to install and finally shut down.  If he is going from one sales presentation to another, this is a significant problem.  It's a Win 7 Pro client.  

I'd like to give this one user the ability to control his own updates.  I can train him to run updates manually (with my checking to be sure they are being done).  Can someone point me to the correct group policy in SBS 2011 to accomplish this?  Or is is possible to still control updates from the server, but at minimum offer him a shut down option without installing updates (and ideally make that the default shut down so he can't accidently click the Shut Down with Updates.  Right now, he only has Shut Down with Updates.  He often has to restart, and then press the power button on the BIOS screen to turn it off without updates.

Any help would be appreciated.  Thanks!