Several of our users have Internet Explorer 11 but our image only has version 9. Machines updates are controlled by WSUS GPO settings and approved updates of which IE 11 is not approved. How would these users get Internet Explorer 11 if our WSUS GPO settings do not allow them to perform their own updates and IE 11 is not approved? After inquiring, these users did not initiate the update.