I have windows 2008 DC and users having mixture of windows xp, windows 7 client machines added to domain.
Now user are not allowed to install any updates for any software's like adobe acrobat, skype etc.
How I can provide this access to users. I want them to allow to install only updates and they should not do new application installations. Any way we can do this using Group policy.