We are a company of about 400 users. Users are not local admins of their computers and our company policy doesn't allow us to do it. But now our manager wants to allow users to upgrade itunes and Java without our intervention. apart from those two programs users should not be able to install any other programs,
I know you can manually do it by downloading Itunes and Java when there is a update and run a script at start up, but can this be done automatically. I mean when there is a update users should be able to download itunes and java and install them. Can this be set by using Group Policies.